fffffffffffff, 0x2000, 0x4, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000040)=""/68) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/211) 17:40:10 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0xaa, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:10 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x4200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:10 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x84000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x22, 0x80000) statx(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x800, 0x1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000080)='./file0\x00', 0xee01, r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:10 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r3, 0x58, "9b3abe6f98bc0486e8e0412875930184fbc4b80bd87068879f1455c236324ea36e80beb834c1f3d22cf059b2f50de6b88bc13a4eb40a6442cc3317676ec3dfcd2ad594839b0357df528477b4ff6589344db7058e28c7c6e6"}, &(0x7f0000000100)=0x60) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r4, 0x401}, 0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:11 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:11 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x80201) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100)={0x10001}, 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x26543, 0x0) r1 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x9, 0xc240) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x2, 0x7a, 0x0, r0, 0x3000000}) 17:40:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x2010000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:11 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:11 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) 17:40:12 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="9b18776e66f9d3836ec88a39c500ee561912a4ec266d6aa90e0a6427c88893f29e25312fd7301755b3b75cd6aa2a002088f26cfcc015c8b5c7c6bec267efa188c251398426a4175919df71de13a43bb08871bd40f8b6bb28fdbb07c84ee3e0944352964f9d09d7aa33407cc0b037cef1948ca62da3d43a0bb4ba22fd805d6073a356c4d50f7d207b2960d102e5a6378321fa43d2438eb93e96d174023be6700bc0b0dd60ef9714feb35e02836505026698a001a80f4856be2909639be9d27a26893663a3ccc6fac609abc98ded3bb6f740d5332948fcbf708da0d881a95b453d1dce17158f77eac80a99d2dbb0789857224ed4594a2f62d25c8f0cc00c2f46a7c273809712783dd3ea652b0ba83bb55ea9b71186a7c3cea9bb6a30f90702655b7ed81c2bc6e1e15ca7adb937ee28795daa13c175362c8c078719d575bc679dce9b60c762afeb27a943cd1d3466dcf541675fd11094b1b2b861c1fe90dde498693bff7c114a632b1e2448180b93ff3814601f5a0819873beaf3b4bcdc36a91ee402556284dcc57de2f320b823596b5e15a93c40c9c28f0a7537af49d7eeb04a0e1246924836cfef43048dc3e0e86ef9418a376b5e02adb97bd1da076f20a0ff209b681c0735f1ddf81e6215298e5aa7d64d32243335bbfc77d4037b508edda8024f7e3bc5264d9080123fe4b6f538ff8a7d0e179d4c52ae41d3cddf96fd6cee90048fa70c8ae0b713b39f96d6305fb7e3f69a0318654b976a2a62410dad656a2d79cfc400f8495c765c4dff503f66c4ec7c90a691fe8f228aa5b23e3517bd76079ca69cdf634dc59b929742befcc673b6f9346304b5a05bd3cf8e979b2c096b915adfce370a67342080ebfac490cc3bb27be0eca27eb40d3a29896fe19327f2d739914f323830ddeea14f8b670736caa7d66f51229aa47b45a9b2e31f13fbf42066e2c1676dd9e82454a88e5d7b2a60d280d0868afff1f8ecff0c5611c3c9023d9320870967da58edbc4d9ab8a7ef9294ac4296bfdc70fc91b341609586efce4b2c110833b1553726d7a60661f6c661c9fd93507f54e08c275186411f9d6644bf3a5a6e0634615062a0d550449c00d286310537b654e19fe01c173a80a8ab8541195a3ecfde6012a015f4ef2f49645daa02adf80dfcb8b9ea1635cea8ac84a3e1ba93a53509e8582d24788eefadaf1598567000e60fc61f212b9f574eee426d362a7acb767cf2734638fa9940d7e16715486b6576fad811f08bb0e502c6f627ba8a980cb2846011b5e8e3c05e0a0d849deafb06865ec538650877c547cea40466079ed1000dc14ebe12c6e64afc093c5b8038f3551820914ae553396b4214939cd2fce1d1ee2a101d341818e911fcdd635cee29a090a3c44ba2792ad162c6d395e90ec772855952efb26b64b901e40577886ddbcac3bccb6ed6217df51140d573108fdb874e432391b51566298e97a7cff7a6b871b4eedd223ca84571e59c206def4e0d6ca832d9be433140c9db5081d3733d8d748adbd7e6a491447e0df267ac293e721f5b8d38cb29faecc4e1ab0f21f0d231f287b72a2bfa030f8b5b9b401927fe7c8bc7c6d9d3c1c17587ada62564d12d9231c1145d9ea87a0746a6410fe0e40d6b5dbf564e6d3d8a0124698ae2a34a312a0a41a7ebb7672618d71b8015204387db69d32460cafc4a36c10d425bfe9a6ba387a069941d4caa611353679a963b4f6ffdbd4d401236e017c9377dc60f7dbe9f6085fb653aa6a4f9ab1003d317f4ac2062d06e92669b2de031072c6daa043b316117009ffba2958b78b5f6056c5949d449a4ace02017647ff81f71135544961ada79462f239e0b262af391d43bf07eaf204b0cdc9a70d761ec607730cdaf850de9dca4c48dffa3c7c6b9a99baee57c713ec9c202af8caaf23b446ebb64407abdc7ffe8b58a516a1a892a256b497c5fd96554d819ca004b47ab8c2d22721f5eb5d16c66a7f5eafc411d3233e73ebe0ffc7092d3b5739298a951ab03ec128ddd1a6715794065a30c33aea90d6c9d37f06733f399d40f2ff516c68731186b91436dea30f3468c6a539924047b78857866e1207a14b0cc17e6ea39f4ba7de201a0c56ad5ce3eccc31be3ddbf5e3751a7897123c097b04d1d660203b995a1be13fb327e2809d49add6075afd60c927549d63b3f2265beb1c289e08781f15185a44d9fed6935f6c67450d0c10db30ee652266708058963633bb6f43826d1f43029191e40c40f587e149aa8c3b2340c19dc76f893432f9476f8645dc8abbe20231bc14734fa9530d8d1099f037b1ae2cbf41b010c0a23796a9fb894a820d1f562f035d08e5431fb567345bc2d47ad9b11c02ccb5d034624ea272bc51d6eb4065a7c4c84874b6aba5904d616b64312b0155000fc75f54e456a6090d0145ab82e5c6f69e2eeea1dc4cf123f817161c74a406a0dcf35b109c7074ddfdb46ca29e049b20b97a334d7b258461f2d907a049b61ef6dfd85c1243c7b56c5404c68a2028182d294b2caac4e1874363e1e83ceb6e545ee6505a289d4d0e5142283f1310a2ce0ec5ddca8b6830b5b249c33ef1b888dd4144a5c3aaa482da68b1a073ed3c38ba5f186ed046ac409083462053cfae8e9dc497cefae5775f3abf4ccb0ef20de10540dd70f93e22b360c83dc12beb02a7a6def0aebe1dbb6483d5002bf758f7026620ef67a5239461875c6e28739f40de5e09f551b9b30cc6b2ed4321da4777a4a96ce16a801c8d3238eeef17ec60962ecd7ed8a4e494d194704f6125a24ff77f08f0ec7fc5eaad897d47b19fa3ac502aabb48cf36c704e8c51a5aea0d9e843a6a9f1fdf3b9b58feb1038ffd0d7ab1689e59ae7b2a76ea4b45f0f070d8946716283e0ad513fe028ae0878a73ea59d43f3a72e905874c9fbb7e0e8afcc54f9c3a4728b3d995f9e9153e247e3826fe6ab68392c20dd7f158839af1465d91ed6cfe8a2d9a7e202b79760b498969da6676256b1516154785b5b8e1700a371b9addb8fce40ec7a4f883f2535420a4a2bc819528e6904cfa755294edbfec0b5e041036cfc70cdc7420d8a12a980e1210738376c24cca17fb04b69d81ce69fe08582e2536ffffe01a2bf3aee006d797e451b09156c18e6159d8963ecc87ecb79d3de62d7dad1e2285e37926ea50a4fa8e7506cb6b0c911ad220d714784f68233acc2f28f3df8cd62368c25a5b0ad78732ba3995fa976b7ce382c04326dcc9ac6bc1800ce4eadd35c79431444f1c06a6b4eb457c66293b80ca61446cea70589ecda38731aea354d8efa5116ecebd90fb5e8d9adda455f8e88a9ec0f0631e00c50350deb4698f2a6542afa3b1caba1ed6d89588ceeef72b1f3f4567f4cdd089d6d17c69f8a73da9c8e0f3d4cd2c18ae29bbe950c2feeb4a146a2dcc54d76777a395d4c7ae7514446df5b0f85eef115b20fa798d9d0ae31169171e690548b5b21551e3360f1bb4d3b81b66c8c0a5b6316f3b034117027f7bee8f71a1e75ad5d287870430c1e664999ef53c03cc4b4f64ff764e68609a6cb80a036199c1643b53646f1de52d2d7a020b6d0b67f0893e32f05d2ed915099235a77254352d88303cf52caa35842cc9ad147eab55e3d214ce487375246de4d2752c7f15ad7849462e61cbb362360c74f138de743adb40658953d993a632edf7728b9ff48ed68928a89e9ae2c7047cc3343384e39d72f4f21b0e3fb5b87d0d180a54dc2cfae9a1ba2bf76b3fabb10df8cd3e1e41cf477c5743742fa6bba36a914230147faf52dcb7157378582498ebb1c4df0e54430b7855a09ea2008b4b4038211b5e4e339350366fec0d677818cba46232949095744ed21e8d7cc709a22431c91a3dd01faa30b0ee4c0919bb3dfc114720e71263f43c7b797544089958a877b1931447d0f08c385ac20487843727a6492c2bdb02c45a724e63d7f393a87af891fe0f23a9e9bff33d3a488b540f1508724fd3650315335fc82146dc3c8c46bb2a07ec14ea226bbfcb6c8559a2a11b03f5fb0ff83b98c9ed40bcd7d27ece429d8fc359b688b22aa989c42009bb991179ce96f4624ee9e161b0da59d478c29be84018b54427c44ebe9f87cfc0c29d67eb4ed2e80d704a05a861dfe2b0bb11db497997a062aebab8d5f61117b7d76a47be6a32d625ee7d106cb374011235c8ede39a4f7ecf44a629781ba4ee81b4f5da6a9d63cb02fffd4e6f0d478196356710f6c4a177fc856344d7a9f009e5bfb1dfcef9a90e119e4bc2dfd9a9365adbba284625b24eb3663a5cb31f0f4a0cb70f6dece4a7440ca5c002e858553c91258e1a390f604b94e14b790d889f470e03ae5c4db0ad64d7e44f9ff062793e8aa2568f90f702c0744d5dea06e74f26769e22f0e0591f44efe13571cfbe41baeeba3c0dd30df85ca9baa0d41c52afdabcffac4845a8fccfc0a612f05c99e7f3f91fc42b462140ea298fd71a1e56dc848e58a48b48fcbfc30b28f9d81d0712fcf42da670dd17cde79685b990340a2c9344e6c886cd82570bda3eef204128d0a4bde9c462ba4a0a2664fc78a6b80a4d56c916b28c22171e321c41399945865a59a7fec20de5bf7990c6eba1b8796678862d484260dd34e2e3474302ba884cd896c589294222ff0e29bd647b03d85351025af3c76ced26340691bedf90fc52c20fd657f7478e0843f578a0f5f672d566bcb4a9f0337c6ba4f0e0082f1e989a046650b028e02568ee7e838215ff8d3d6c92f9c89f67d6b1de14246989d9637c2b58c0cf469aa2746d6714e06e6dcc92c2c93e25e1e3560038d45f6d1412228029a36d6479a4da43b82079a965052e97e272470934cd9e95f4a6ed3fc337e23f9db9c01a9f5fb650e8d4ae2d93b8a4898d6c9f9548aa65d827c6232e4ea7d0f0e1fe121329651690db0e948c6898aa0648d95f56fa3d30513f6c754eddd957926322cf8bb19acd3bcd6359e090f739cc561a1c4566ad5bb7a7870110f14a19594829423f248cd974d4459101fcd7b19963906e2fd0e8ad54d534173b74e7b64c54643723e0ab063ca5034a38e857aba14144c3cb3262e5f2d345f476ee6403b957fcf21bb9e6f71ee3a076434c07c788a4e9260190f6d9cf77001ccf44f4d83774c76db4f1e58d8800927a5ec53df973c6380fd03c337f49b87a0cd5e357c521ce54eecd401bf3b74bccb5aae7229ac2c838a61cc0c75587a88f04c8485668a7d56d159e99c4c4a15669f34b2aca1e31661458e30b80b9d594d8b6e49f6377e6437b26dba31cb75e35d180c3036bf980ca9efebe5b6e0e12609bb4a67dc53291f942f82482415e703b69fc4c68fb303417f27b7417fa978cffd98b53b9adff4bc94a47c3b544c5289e3e0cbaa1255445ed8d100bc6f10e317fae8380213d00813e217932918b33b77b39318fe12df204a31d7ae9af03c2256fc24484d12dde06fae94285d817215e829a31962e67ca7c408445357c961bda022ae478fed5539f1f69724f44b2f5e8f8346497d31d472a39cfba3520de0cc18f915159efc28fbc829c900618cb3bc23e311a02cc552c2cde83fede00bd8797a82cd4e5c880bc9f2919e9cefce63044052c1119c8d693d439cf35b4057076a3b57ad27d258e464a8927e39f7eadf4273ca9b824526cf53aaf82a008befa1cef32943f95d525ec23243802786336b2c632d9451aacab5d1503404c2cf121d7531729a8c0844a3bcdeed80c1ad4cd4a7f60ad061e0c5d378cb868e0906d1a1cecefc16c5b6272163544ffa03970dc82e93f143bec19cb44495b9e787470c2dc7224f0880e6938c0562672a92c847d") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x200, 0x100001) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x330f) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80202, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:12 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000040), 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1595.522763][ T1784] warn_alloc: 16 callbacks suppressed [ 1595.522781][ T1784] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1595.784513][ T1784] CPU: 1 PID: 1784 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1595.793131][ T1784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1595.803194][ T1784] Call Trace: [ 1595.806497][ T1784] dump_stack+0x188/0x20d [ 1595.810871][ T1784] warn_alloc.cold+0x87/0x164 [ 1595.815562][ T1784] ? zone_watermark_ok_safe+0x260/0x260 [ 1595.821112][ T1784] ? ___might_sleep+0x15a/0x2b0 [ 1595.825983][ T1784] ? __alloc_pages_direct_compact+0x366/0x420 [ 1595.832061][ T1784] ? get_page_from_freelist+0x3580/0x3580 [ 1595.837785][ T1784] ? __isolate_free_page+0x610/0x610 [ 1595.843087][ T1784] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1595.849706][ T1784] ? get_page_from_freelist+0x1767/0x3580 [ 1595.857272][ T1784] ? warn_alloc+0x110/0x110 [ 1595.861793][ T1784] ? __isolate_free_page+0x610/0x610 [ 1595.867094][ T1784] __alloc_pages_nodemask+0x5d9/0x810 [ 1595.872473][ T1784] ? mutex_trylock+0x2c0/0x2c0 [ 1595.877244][ T1784] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1595.884071][ T1784] ? wait_for_completion+0x270/0x270 [ 1595.889368][ T1784] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1595.895801][ T1784] alloc_pages_current+0xff/0x200 [ 1595.900848][ T1784] ion_page_pool_alloc+0x186/0x280 [ 1595.905992][ T1784] ion_system_heap_allocate+0x321/0xb00 [ 1595.913297][ T1784] ? ion_system_heap_free+0x240/0x240 [ 1595.918680][ T1784] ? kfree+0x1eb/0x2b0 [ 1595.922764][ T1784] ? ion_ioctl+0x9da/0xca0 [ 1595.927197][ T1784] ? lockdep_hardirqs_on+0x463/0x620 [ 1595.932500][ T1784] ion_ioctl+0x37a/0xca0 [ 1595.936766][ T1784] ? _ion_buffer_destroy+0xa0/0xa0 [ 1595.942035][ T1784] ? ksys_dup3+0x3c0/0x3c0 [ 1595.946466][ T1784] ? __x64_sys_futex+0x380/0x4f0 [ 1595.951426][ T1784] ? _ion_buffer_destroy+0xa0/0xa0 [ 1595.956635][ T1784] ksys_ioctl+0x11a/0x180 [ 1595.960988][ T1784] __x64_sys_ioctl+0x6f/0xb0 [ 1595.965586][ T1784] ? lockdep_hardirqs_on+0x463/0x620 [ 1595.970883][ T1784] do_syscall_64+0xf6/0x7d0 [ 1595.975403][ T1784] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1595.981301][ T1784] RIP: 0033:0x45c829 [ 1595.985204][ T1784] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1596.004816][ T1784] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1596.013241][ T1784] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1596.021226][ T1784] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 17:40:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:13 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1596.029206][ T1784] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1596.037186][ T1784] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1596.045168][ T1784] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 17:40:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:14 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1596.752333][ T1784] Mem-Info: [ 1596.764089][ T1784] active_anon:213811 inactive_anon:6170 isolated_anon:0 [ 1596.764089][ T1784] active_file:2858 inactive_file:14604 isolated_file:0 [ 1596.764089][ T1784] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1596.764089][ T1784] slab_reclaimable:19072 slab_unreclaimable:152383 [ 1596.764089][ T1784] mapped:57512 shmem:6413 pagetables:4725 bounce:0 [ 1596.764089][ T1784] free:801469 free_pcp:123 free_cma:0 [ 1596.846003][ T1808] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1596.921513][ T1808] CPU: 1 PID: 1808 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1596.922256][ T1784] Node 0 active_anon:844268kB inactive_anon:16448kB active_file:12kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216452kB dirty:52kB writeback:0kB shmem:17404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 311296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1596.930113][ T1808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1596.930119][ T1808] Call Trace: [ 1596.930145][ T1808] dump_stack+0x188/0x20d [ 1596.930166][ T1808] dump_header+0x10b/0x826 [ 1596.930183][ T1808] oom_kill_process.cold+0x10/0x15 [ 1596.930199][ T1808] out_of_memory+0x31f/0x12f0 [ 1596.930220][ T1808] ? oom_killer_disable+0x270/0x270 [ 1596.930239][ T1808] ? mutex_trylock+0x246/0x2c0 [ 1596.930252][ T1808] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1596.930275][ T1808] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1596.930307][ T1808] ? warn_alloc+0x110/0x110 [ 1597.004484][ T1784] Node 0 DMA free:10304kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:360kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.007806][ T1808] __alloc_pages_nodemask+0x5d9/0x810 [ 1597.007824][ T1808] ? mutex_trylock+0x2c0/0x2c0 [ 1597.007840][ T1808] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1597.007863][ T1808] ? mark_lock+0x12b/0xf10 [ 1597.026080][ T1784] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1597.049181][ T1808] ? wait_for_completion+0x270/0x270 [ 1597.049200][ T1808] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1597.049220][ T1808] alloc_pages_current+0xff/0x200 [ 1597.049244][ T1808] ion_page_pool_alloc+0x186/0x280 [ 1597.049265][ T1808] ion_system_heap_allocate+0x321/0xb00 [ 1597.055959][ T1784] Node 0 DMA32 free:35908kB min:35932kB low:44912kB high:53892kB reserved_highatomic:2048KB active_anon:843888kB inactive_anon:16448kB active_file:12kB inactive_file:24kB unevictable:0kB writepending:52kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11860kB pagetables:15196kB bounce:0kB free_pcp:168kB local_pcp:168kB free_cma:0kB [ 1597.059397][ T1808] ? ion_system_heap_free+0x240/0x240 [ 1597.059413][ T1808] ? kfree+0x1eb/0x2b0 [ 1597.059427][ T1808] ? ion_ioctl+0x9da/0xca0 [ 1597.059443][ T1808] ? lockdep_hardirqs_on+0x463/0x620 [ 1597.059465][ T1808] ion_ioctl+0x37a/0xca0 [ 1597.066383][ T1784] lowmem_reserve[]: 0 0 0 0 0 [ 1597.070609][ T1808] ? _ion_buffer_destroy+0xa0/0xa0 [ 1597.070643][ T1808] ? ksys_dup3+0x3c0/0x3c0 [ 1597.070665][ T1808] ? __x64_sys_futex+0x380/0x4f0 [ 1597.076493][ T1784] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1597.081626][ T1808] ? _ion_buffer_destroy+0xa0/0xa0 [ 1597.081643][ T1808] ksys_ioctl+0x11a/0x180 [ 1597.081663][ T1808] __x64_sys_ioctl+0x6f/0xb0 [ 1597.081683][ T1808] ? lockdep_hardirqs_on+0x463/0x620 [ 1597.088245][ T1784] lowmem_reserve[]: 0 0 0 0 0 [ 1597.093074][ T1808] do_syscall_64+0xf6/0x7d0 [ 1597.093094][ T1808] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1597.093109][ T1808] RIP: 0033:0x45c829 [ 1597.098392][ T1784] Node 0 DMA: 42*4kB (UE) 38*8kB (UE) 45*16kB (UE) 23*32kB (UME) 3*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10312kB [ 1597.103719][ T1808] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1597.103728][ T1808] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1597.103747][ T1808] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1597.137060][ T1784] Node 0 DMA32: 185*4kB (UMEH) 299*8kB (MEH) 203*16kB (UEH) 839*32kB (UEH) 44*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36044kB [ 1597.141536][ T1808] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1597.141545][ T1808] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1597.141554][ T1808] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1597.141562][ T1808] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:40:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1597.933907][ T1808] Mem-Info: [ 1597.947406][ T1808] active_anon:213807 inactive_anon:6170 isolated_anon:0 [ 1597.947406][ T1808] active_file:2815 inactive_file:14646 isolated_file:0 [ 1597.947406][ T1808] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1597.947406][ T1808] slab_reclaimable:19066 slab_unreclaimable:152940 [ 1597.947406][ T1808] mapped:57505 shmem:6413 pagetables:4700 bounce:0 [ 1597.947406][ T1808] free:830050 free_pcp:438 free_cma:0 17:40:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1598.074492][ T1784] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB 17:40:15 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200885, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x100000000, 0x400a20) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000200)=0x5f72c9e1) [ 1598.124960][ T1784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.166860][ T1784] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1598.181972][ T1808] Node 0 active_anon:845088kB inactive_anon:16448kB active_file:52kB inactive_file:100kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216380kB dirty:4kB writeback:0kB shmem:17404kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 311296kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1598.237128][ T1784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1598.287071][ T1784] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1598.335837][ T1808] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:352kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1598.339808][ T1784] 12156 total pagecache pages [ 1598.476350][ T1808] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1598.494029][ T1784] 0 pages in swap cache [ 1598.507729][ T1808] Node 0 DMA32 free:102532kB min:116768kB low:125748kB high:134728kB reserved_highatomic:2048KB active_anon:848044kB inactive_anon:16448kB active_file:192kB inactive_file:84kB unevictable:0kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11856kB pagetables:15348kB bounce:0kB free_pcp:608kB local_pcp:72kB free_cma:0kB [ 1598.547521][ T1784] Swap cache stats: add 0, delete 0, find 0/0 [ 1598.567227][ T1784] Free swap = 0kB [ 1598.602977][ T1784] Total swap = 0kB [ 1598.606868][ T1784] 1965979 pages RAM [ 1598.624591][ T1784] 0 pages HighMem/MovableOnly 17:40:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1598.655267][ T1784] 349380 pages reserved [ 1598.669905][ T1784] 0 pages cma reserved [ 1598.695349][ T1808] lowmem_reserve[]: 0 0 0 0 0 [ 1598.725532][ T1808] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:40:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1598.899725][ T1808] lowmem_reserve[]: 0 0 0 0 0 [ 1598.924600][ T1808] Node 0 DMA: 34*4kB (UE) 43*8kB (UME) 45*16kB (UE) 22*32kB (UE) 4*64kB (UM) 4*128kB (UM) 2*256kB (UM) 2*512kB (UE) 2*1024kB (ME) 2*2048kB (UE) 0*4096kB = 10352kB 17:40:16 executing program 1: set_mempolicy(0x3, &(0x7f00000000c0)=0x1f, 0x4000000000003) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x208082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x10000, 0x4, 0x31, 0x0, 0x3, {0x77359400}, {0x1, 0x1, 0xff, 0x9, 0x71, 0x6}, 0x1, 0x1, @planes=&(0x7f0000000140)={0x56e, 0x80, @userptr=0x80000000, 0x400}, 0xfffff8d0, 0x0, r4}) [ 1599.077115][ T1808] Node 0 DMA32: 97*4kB (UMEH) 331*8kB (UMEH) 472*16kB (UMEH) 824*32kB (UMEH) 525*64kB (UME) 223*128kB (UM) 53*256kB (UM) 9*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 120348kB 17:40:16 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1599.204749][ T1808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1599.287654][ T1808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.442170][ T1808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1599.471738][ T1808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1599.503322][ T1808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1599.571685][ T1808] 13183 total pagecache pages [ 1599.604084][ T1808] 0 pages in swap cache [ 1599.640229][ T1808] Swap cache stats: add 0, delete 0, find 0/0 [ 1599.687228][ T1808] Free swap = 0kB [ 1599.713751][ T1808] Total swap = 0kB [ 1599.745497][ T1808] 1965979 pages RAM [ 1599.775168][ T1808] 0 pages HighMem/MovableOnly [ 1599.807725][ T1808] 349380 pages reserved [ 1599.847384][ T1808] 0 pages cma reserved [ 1599.872241][ T1808] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23253,uid=0 17:40:17 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000100)={0x20, 0x7, 0x4, 0x2, 0x2, {0x0, 0xea60}, {0x3, 0x2, 0x90, 0x80, 0x5, 0x70, "066855b8"}, 0x8, 0x2, @userptr=0x10002000000000, 0x1, 0x0, r0}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r4, 0x2}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000000240)={r4, 0x4, &(0x7f0000000080)=[0x3, 0x18, 0x1ff, 0x10000], &(0x7f0000000180)=[0x101, 0xfffffff9, 0x3, 0x2, 0x7, 0x10000, 0x6], 0x66, 0x4, 0x8, &(0x7f00000001c0)=[0x1, 0x400, 0x10000, 0x400], &(0x7f0000000200)=[0x200, 0x1, 0x5, 0x1f, 0x100]}) syz_open_dev$vivid(&(0x7f00000002c0)='/dev/video#\x00', 0x1, 0x2) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x3, 'sit0\x00', {0xffff0001}, 0x81}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000340)={0x1f, 0x2c, &(0x7f0000000300)="32c5fd75888ae3b0540923c4d5eec50a2908f15d00da0e11ebc8046ed87f7c809fd63900472229592fb8bc98"}) 17:40:17 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x151000, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000100)={0x67ab, 0x1}) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x7, 0x3ff, 0x7, 0x7, 0x8}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1600.027315][ T1808] Out of memory: Killed process 23253 (syz-executor.2) total-vm:75236kB, anon-rss:4268kB, file-rss:34840kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 17:40:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:17 executing program 0: set_mempolicy(0x8003, &(0x7f0000000040)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:18 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000040)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:18 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0xc2, ""/194}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:18 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f0000000040)}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044840}, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x11}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e22, 0x9, @ipv4={[], [], @loopback}}], 0x48) 17:40:18 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) 17:40:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x9000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:19 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x200885, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x100000000, 0x400a20) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000200)=0x5f72c9e1) 17:40:19 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x800, 0x13, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:20 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:20 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="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") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:20 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x800) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000140)) read$eventfd(r1, &(0x7f0000000080), 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:20 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RLERROR(r4, &(0x7f0000000040)={0xc, 0x7, 0x1, {0x3, '@-#'}}, 0xc) 17:40:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xa000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:20 executing program 0: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r0, 0x96, 0x1000}, 0x0, &(0x7f0000000100)="10a8f779cb34faa1e514b580abf51f14f8a494af3df09cb83cec1c5efa8c74ef666d5fe93fb41ae1dc2f09b6705edab6c6e91e492d8aad8ef5a132d2d576af4432c9f1bad914ce7659734de2c3776f631b3c917694cd24c94db3768cb5e177e3f7b89f3af0feff2251ff46c94afd3abd5ca12bef4d62140e0b2e597a5cce5b80143d76c851e5a5d7d49e0c7e03a2db7a315c30dc2232", &(0x7f0000000300)=""/4096) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x940, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:21 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000040)=0x1ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0xa}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00', r7}) 17:40:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xc000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:22 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40401, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000300)="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") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:22 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xe49}, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x6bcf}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e21, 0x6, @loopback, 0x6}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x84) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xe000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:22 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)={r5, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={r2, 0xfff, 0x0, 0x1, 0x9, 0x4, 0x200, 0x80000001, {r5, @in={{0x2, 0x4e23, @remote}}, 0x2, 0xe86, 0x0, 0xffff0000, 0x40}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x7, 0x0, 0xffffffff}, 0x10) socket$xdp(0x2c, 0x3, 0x0) 17:40:24 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:24 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000040)) 17:40:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x349080, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000200)={0x0, 0x17, 0x300e, 0x1}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0xad00, 0x0) dup(r2) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000180)=0x1e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r3 = socket$inet6(0xa, 0x4, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000100)={0x2}) 17:40:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xf010000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:24 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x100, 0x0) getpeername$l2tp(r5, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000100)=0x3a) 17:40:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x202200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) socket$inet6_udp(0xa, 0x2, 0x0) 17:40:24 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:25 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000100)=""/177) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = pkey_alloc(0x0, 0x3) pkey_free(r3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1607.607504][ T2017] warn_alloc: 12 callbacks suppressed [ 1607.607524][ T2017] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 17:40:25 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1607.722366][ T2017] CPU: 0 PID: 2017 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1607.732201][ T2017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1607.742265][ T2017] Call Trace: [ 1607.745583][ T2017] dump_stack+0x188/0x20d [ 1607.749933][ T2017] warn_alloc.cold+0x87/0x164 [ 1607.754630][ T2017] ? zone_watermark_ok_safe+0x260/0x260 [ 1607.760191][ T2017] ? ___might_sleep+0x15a/0x2b0 [ 1607.765060][ T2017] ? __alloc_pages_direct_compact+0x366/0x420 [ 1607.771152][ T2017] ? get_page_from_freelist+0x3580/0x3580 [ 1607.776905][ T2017] ? __isolate_free_page+0x610/0x610 [ 1607.782314][ T2017] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1607.788936][ T2017] ? get_page_from_freelist+0x1767/0x3580 [ 1607.794684][ T2017] ? warn_alloc+0x110/0x110 [ 1607.799216][ T2017] ? __isolate_free_page+0x610/0x610 [ 1607.804530][ T2017] __alloc_pages_nodemask+0x5d9/0x810 [ 1607.809921][ T2017] ? mutex_trylock+0x2c0/0x2c0 [ 1607.814701][ T2017] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1607.821489][ T2017] ? wait_for_completion+0x270/0x270 [ 1607.826803][ T2017] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1607.833411][ T2017] alloc_pages_current+0xff/0x200 [ 1607.838464][ T2017] ion_page_pool_alloc+0x186/0x280 [ 1607.843639][ T2017] ion_system_heap_allocate+0x321/0xb00 [ 1607.849216][ T2017] ? ion_system_heap_free+0x240/0x240 [ 1607.854610][ T2017] ? kfree+0x1eb/0x2b0 [ 1607.858705][ T2017] ? ion_ioctl+0x9da/0xca0 [ 1607.863144][ T2017] ? lockdep_hardirqs_on+0x463/0x620 [ 1607.868449][ T2017] ion_ioctl+0x37a/0xca0 [ 1607.872717][ T2017] ? _ion_buffer_destroy+0xa0/0xa0 [ 1607.881417][ T2017] ? ksys_dup3+0x3c0/0x3c0 [ 1607.885854][ T2017] ? __x64_sys_futex+0x380/0x4f0 [ 1607.890820][ T2017] ? _ion_buffer_destroy+0xa0/0xa0 [ 1607.895947][ T2017] ksys_ioctl+0x11a/0x180 [ 1607.900298][ T2017] __x64_sys_ioctl+0x6f/0xb0 [ 1607.905865][ T2017] ? lockdep_hardirqs_on+0x463/0x620 [ 1607.911168][ T2017] do_syscall_64+0xf6/0x7d0 [ 1607.915691][ T2017] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1607.921618][ T2017] RIP: 0033:0x45c829 [ 1607.925522][ T2017] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1607.945128][ T2017] RSP: 002b:00007fbdaea9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1607.953550][ T2017] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1607.961618][ T2017] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1607.969603][ T2017] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1607.977581][ T2017] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1607.985559][ T2017] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaea9e6d4 17:40:25 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)={r5, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={r2, 0xfff, 0x0, 0x1, 0x9, 0x4, 0x200, 0x80000001, {r5, @in={{0x2, 0x4e23, @remote}}, 0x2, 0xe86, 0x0, 0xffff0000, 0x40}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r6, 0x7, 0x0, 0xffffffff}, 0x10) socket$xdp(0x2c, 0x3, 0x0) 17:40:26 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x20000000, 0xffffffffffffffff) eventfd(0x5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x12000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:26 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r4, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x10, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffc0}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xbc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfbff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8e0a}]}, 0x48}}, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1609.272880][ T2017] Mem-Info: [ 1609.287659][ T2017] active_anon:217387 inactive_anon:6173 isolated_anon:0 [ 1609.287659][ T2017] active_file:2968 inactive_file:15673 isolated_file:0 [ 1609.287659][ T2017] unevictable:0 dirty:70 writeback:0 unstable:0 [ 1609.287659][ T2017] slab_reclaimable:18833 slab_unreclaimable:153644 [ 1609.287659][ T2017] mapped:58544 shmem:6416 pagetables:4691 bounce:0 17:40:27 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x8c002, 0x0) ioctl$BLKIOMIN(r4, 0x1278, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x401, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3000000}) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x33) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) getpgid(r5) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000100)={0x2, 0x0, 0x92, 0x80000000, 0x8000, 0x140000, 0xe6f2, 0x3331, 0xffe000}) [ 1609.287659][ T2017] free:762533 free_pcp:405 free_cma:0 17:40:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x14030000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1609.535249][ T2017] Node 0 active_anon:850768kB inactive_anon:16464kB active_file:212kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216472kB dirty:32kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1609.675992][ T2017] Node 0 DMA free:10312kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1044kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1609.788818][ T2017] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1609.815778][ T2017] Node 0 DMA32 free:188364kB min:72796kB low:81776kB high:90756kB reserved_highatomic:2048KB active_anon:849824kB inactive_anon:16464kB active_file:212kB inactive_file:128kB unevictable:0kB writepending:32kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11792kB pagetables:15228kB bounce:0kB free_pcp:1644kB local_pcp:320kB free_cma:0kB [ 1609.997710][ T2017] lowmem_reserve[]: 0 0 0 0 0 [ 1610.026371][ T2017] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1610.212034][ T2017] lowmem_reserve[]: 0 0 0 0 0 [ 1610.233996][ T2017] Node 0 DMA: 49*4kB (UE) 30*8kB (UME) 44*16kB (UME) 28*32kB (UME) 4*64kB (UM) 2*128kB (UM) 1*256kB (M) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10484kB [ 1610.317106][ T2017] Node 0 DMA32: 333*4kB (UMEH) 1497*8kB (UMEH) 3168*16kB (UEH) 1432*32kB (UEH) 1308*64kB (UM) 417*128kB (UM) 73*256kB (U) 5*512kB (U) 1*1024kB (U) 1*2048kB (U) 0*4096kB = 271228kB [ 1610.386304][ T2017] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1610.425012][ T2017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.443004][ T2017] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.455590][ T2017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1610.473976][ T2017] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1610.483946][ T2017] 13233 total pagecache pages [ 1610.496030][ T2017] 0 pages in swap cache [ 1610.500807][ T2017] Swap cache stats: add 0, delete 0, find 0/0 [ 1610.538804][ T2017] Free swap = 0kB [ 1610.542576][ T2017] Total swap = 0kB [ 1610.546779][ T2017] 1965979 pages RAM [ 1610.550629][ T2017] 0 pages HighMem/MovableOnly [ 1610.555341][ T2017] 349380 pages reserved [ 1610.566643][ T2017] 0 pages cma reserved 17:40:28 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000100)={0x4, [0x3, 0x7f, 0x9], [{0x8bb0, 0xfff, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x401, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x1, 0xb02, 0x1, 0x0, 0x1}, {0x8000, 0x19b, 0x1, 0x1, 0x0, 0x1}, {0x69, 0x5, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x8001, 0x0, 0x1, 0x1, 0x1}, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x80000000, 0x1}, {0x1, 0x3, 0x0, 0x0, 0x1}, {0x9, 0x3ff, 0x0, 0x1, 0x1}], 0x4}) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:28 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010004, 0x9, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000100)={0x7, 0x1, "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"}) 17:40:28 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:28 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x150a0000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:28 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) socket$inet6_udp(0xa, 0x2, 0x0) [ 1611.771618][ T2064] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1611.841496][ T2064] CPU: 1 PID: 2064 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1611.850111][ T2064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1611.860168][ T2064] Call Trace: [ 1611.863511][ T2064] dump_stack+0x188/0x20d [ 1611.867859][ T2064] dump_header+0x10b/0x826 [ 1611.872290][ T2064] oom_kill_process.cold+0x10/0x15 [ 1611.877498][ T2064] out_of_memory+0x31f/0x12f0 [ 1611.882200][ T2064] ? oom_killer_disable+0x270/0x270 [ 1611.887410][ T2064] ? mutex_trylock+0x246/0x2c0 [ 1611.892185][ T2064] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1611.898876][ T2064] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1611.905496][ T2064] ? warn_alloc+0x110/0x110 [ 1611.910037][ T2064] __alloc_pages_nodemask+0x5d9/0x810 [ 1611.915527][ T2064] ? mutex_trylock+0x2c0/0x2c0 [ 1611.920395][ T2064] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1611.927218][ T2064] ? policy_nodemask+0x13e/0x1a0 [ 1611.932174][ T2064] ? wait_for_completion+0x270/0x270 [ 1611.937479][ T2064] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1611.943915][ T2064] alloc_pages_current+0xff/0x200 [ 1611.948962][ T2064] ion_page_pool_alloc+0x186/0x280 [ 1611.954100][ T2064] ion_system_heap_allocate+0x321/0xb00 [ 1611.959680][ T2064] ? ion_system_heap_free+0x240/0x240 [ 1611.965078][ T2064] ? __might_fault+0x190/0x1d0 [ 1611.969866][ T2064] ion_ioctl+0x37a/0xca0 [ 1611.974145][ T2064] ? _ion_buffer_destroy+0xa0/0xa0 [ 1611.979290][ T2064] ? ksys_dup3+0x3c0/0x3c0 [ 1611.983753][ T2064] ? __x64_sys_futex+0x380/0x4f0 [ 1611.988718][ T2064] ? _ion_buffer_destroy+0xa0/0xa0 [ 1611.993847][ T2064] ksys_ioctl+0x11a/0x180 [ 1611.998201][ T2064] __x64_sys_ioctl+0x6f/0xb0 [ 1612.002907][ T2064] ? lockdep_hardirqs_on+0x463/0x620 [ 1612.008206][ T2064] do_syscall_64+0xf6/0x7d0 [ 1612.012734][ T2064] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1612.018632][ T2064] RIP: 0033:0x45c829 [ 1612.022533][ T2064] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1612.042145][ T2064] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1612.050656][ T2064] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1612.058648][ T2064] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1612.066633][ T2064] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1612.074636][ T2064] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1612.082623][ T2064] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 17:40:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x40c01, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:30 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:30 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x4, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x84e00, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x40100, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000100)={{0x2, 0x0, @reserved="06610a5aa0def4f2c1392ccfcc8aaa0cca56234e5d67145b697a9ff43baabefe"}}) 17:40:30 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x7f, 0xb, 0x4, 0x8, 0x40, {0x77359400}, {0x2, 0x1, 0x3, 0x8, 0x81, 0x0, "8c1f2b08"}, 0x400, 0x4, @planes=&(0x7f0000000100)={0x4, 0x101, @fd=r3, 0x9}, 0x101, 0x0, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r6, 0x1, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8008042}, 0x10) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) write$FUSE_INTERRUPT(r9, &(0x7f0000000040)={0x10, 0xffffffffffffffda, 0x4}, 0x10) 17:40:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1613.139021][ T2064] Mem-Info: [ 1613.148209][ T2064] active_anon:217921 inactive_anon:6176 isolated_anon:0 [ 1613.148209][ T2064] active_file:2929 inactive_file:15666 isolated_file:0 [ 1613.148209][ T2064] unevictable:0 dirty:3 writeback:0 unstable:0 [ 1613.148209][ T2064] slab_reclaimable:18914 slab_unreclaimable:154010 [ 1613.148209][ T2064] mapped:58554 shmem:6419 pagetables:4698 bounce:0 [ 1613.148209][ T2064] free:792873 free_pcp:486 free_cma:0 17:40:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1613.234228][ T2064] Node 0 active_anon:852820kB inactive_anon:16464kB active_file:56kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216392kB dirty:4kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 307200kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1613.372492][ T2064] Node 0 DMA free:10316kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.460212][ T2064] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1613.473419][ T2064] Node 0 DMA32 free:56548kB min:37980kB low:46960kB high:55940kB reserved_highatomic:2048KB active_anon:851716kB inactive_anon:16464kB active_file:56kB inactive_file:16kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11880kB pagetables:14848kB bounce:0kB free_pcp:1512kB local_pcp:1120kB free_cma:0kB [ 1613.549634][ T2064] lowmem_reserve[]: 0 0 0 0 0 [ 1613.562209][ T2064] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1613.628673][ T2064] lowmem_reserve[]: 0 0 0 0 0 [ 1613.639774][ T2064] Node 0 DMA: 17*4kB (UME) 30*8kB (UME) 46*16kB (UME) 30*32kB (UME) 4*64kB (U) 1*128kB (U) 1*256kB (M) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10324kB [ 1613.686064][ T2064] Node 0 DMA32: 343*4kB (UMEH) 349*8kB (UMEH) 239*16kB (UMEH) 578*32kB (UMEH) 23*64kB (U) 60*128kB (U) 23*256kB (U) 1*512kB (U) 14*1024kB (U) 0*2048kB 0*4096kB = 56372kB [ 1613.704432][ T2064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1613.716506][ T2064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.726603][ T2064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1613.736455][ T2064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1613.746571][ T2064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1613.757284][ T2064] 13180 total pagecache pages [ 1613.762147][ T2064] 0 pages in swap cache [ 1613.766849][ T2064] Swap cache stats: add 0, delete 0, find 0/0 [ 1613.773097][ T2064] Free swap = 0kB [ 1613.778522][ T2064] Total swap = 0kB [ 1613.782503][ T2064] 1965979 pages RAM [ 1613.786879][ T2064] 0 pages HighMem/MovableOnly [ 1613.799694][ T2064] 349380 pages reserved [ 1613.804816][ T2064] 0 pages cma reserved [ 1613.821502][ T2064] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23413,uid=0 [ 1613.863047][ T2064] Out of memory: Killed process 23413 (syz-executor.2) total-vm:74972kB, anon-rss:4252kB, file-rss:34640kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 17:40:31 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000040)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x990a6e, 0x5d, [], @string=&(0x7f0000000040)=0x1}}) 17:40:31 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:31 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1614.009520][ T2104] tipc: All keys are flushed! 17:40:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x1c030000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:31 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:31 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fdatasync(r1) [ 1614.184129][ T2119] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1614.210146][ T2119] CPU: 0 PID: 2119 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1614.218796][ T2119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1614.228862][ T2119] Call Trace: [ 1614.232166][ T2119] dump_stack+0x188/0x20d [ 1614.236513][ T2119] dump_header+0x10b/0x826 [ 1614.240945][ T2119] oom_kill_process.cold+0x10/0x15 [ 1614.246070][ T2119] out_of_memory+0x31f/0x12f0 [ 1614.250767][ T2119] ? oom_killer_disable+0x270/0x270 [ 1614.256007][ T2119] ? mutex_trylock+0x246/0x2c0 [ 1614.260796][ T2119] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1614.267489][ T2119] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1614.274132][ T2119] ? warn_alloc+0x110/0x110 [ 1614.278657][ T2119] __alloc_pages_nodemask+0x5d9/0x810 [ 1614.284044][ T2119] ? mutex_trylock+0x2c0/0x2c0 [ 1614.288827][ T2119] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1614.295600][ T2119] ? mark_lock+0x12b/0xf10 [ 1614.300025][ T2119] ? wait_for_completion+0x270/0x270 [ 1614.305329][ T2119] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1614.311757][ T2119] alloc_pages_current+0xff/0x200 [ 1614.316895][ T2119] ion_page_pool_alloc+0x186/0x280 [ 1614.322025][ T2119] ion_system_heap_allocate+0x321/0xb00 [ 1614.327597][ T2119] ? ion_system_heap_free+0x240/0x240 [ 1614.332978][ T2119] ? kfree+0x1eb/0x2b0 [ 1614.337060][ T2119] ? ion_ioctl+0x9da/0xca0 [ 1614.341486][ T2119] ? lockdep_hardirqs_on+0x463/0x620 [ 1614.346783][ T2119] ion_ioctl+0x37a/0xca0 [ 1614.351049][ T2119] ? _ion_buffer_destroy+0xa0/0xa0 [ 1614.356187][ T2119] ? ksys_dup3+0x3c0/0x3c0 [ 1614.360613][ T2119] ? __x64_sys_futex+0x380/0x4f0 [ 1614.365571][ T2119] ? _ion_buffer_destroy+0xa0/0xa0 [ 1614.370690][ T2119] ksys_ioctl+0x11a/0x180 [ 1614.375036][ T2119] __x64_sys_ioctl+0x6f/0xb0 [ 1614.379635][ T2119] ? lockdep_hardirqs_on+0x463/0x620 [ 1614.384929][ T2119] do_syscall_64+0xf6/0x7d0 [ 1614.389445][ T2119] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1614.395337][ T2119] RIP: 0033:0x45c829 [ 1614.399232][ T2119] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1614.419328][ T2119] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1614.427832][ T2119] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1614.435815][ T2119] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1614.443800][ T2119] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1614.451782][ T2119] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1614.459764][ T2119] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 17:40:32 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x6, 0x4) [ 1614.874694][ T2119] Mem-Info: [ 1614.894456][ T2119] active_anon:217939 inactive_anon:6176 isolated_anon:0 [ 1614.894456][ T2119] active_file:2948 inactive_file:15701 isolated_file:0 [ 1614.894456][ T2119] unevictable:0 dirty:16 writeback:25 unstable:0 [ 1614.894456][ T2119] slab_reclaimable:18953 slab_unreclaimable:154708 [ 1614.894456][ T2119] mapped:58625 shmem:6419 pagetables:4709 bounce:0 [ 1614.894456][ T2119] free:842112 free_pcp:133 free_cma:0 [ 1615.043432][ T2119] Node 0 active_anon:852620kB inactive_anon:16464kB active_file:28kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216396kB dirty:12kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 307200kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:40:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x1e020000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1615.201673][ T2119] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:40:33 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1615.343348][ T2119] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1615.361734][ T2119] Node 0 DMA32 free:37864kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:851436kB inactive_anon:16464kB active_file:28kB inactive_file:28kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11688kB pagetables:14796kB bounce:0kB free_pcp:772kB local_pcp:248kB free_cma:0kB [ 1615.409277][ T2119] lowmem_reserve[]: 0 0 0 0 0 [ 1615.428787][ T2119] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1615.472985][ T2119] lowmem_reserve[]: 0 0 0 0 0 [ 1615.489769][ T2119] Node 0 DMA: 13*4kB (UME) 27*8kB (UME) 47*16kB (UME) 29*32kB (UME) 2*64kB (UM) 0*128kB 2*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10268kB [ 1615.541984][ T2119] Node 0 DMA32: 138*4kB (UME) 259*8kB (UME) 75*16kB (UME) 12*32kB (ME) 291*64kB (UM) 22*128kB (U) 46*256kB (U) 1*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37936kB [ 1615.561482][ T2119] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1615.574794][ T2119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1615.590647][ T2119] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1615.614724][ T2119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1615.643890][ T2119] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1615.745257][ T2119] 13248 total pagecache pages [ 1615.762666][ T2119] 0 pages in swap cache [ 1615.788432][ T2119] Swap cache stats: add 0, delete 0, find 0/0 [ 1615.816416][ T2119] Free swap = 0kB 17:40:33 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x100c2, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x2000000, 0x5, {r3, r4/1000+60000}, {0x5, 0x1, 0x3e, 0x3, 0x2, 0x5, "edd6d548"}, 0xc0, 0x1, @userptr=0xff, 0xf6d, 0x0, r5}) [ 1615.836081][ T2119] Total swap = 0kB [ 1615.869032][ T2119] 1965979 pages RAM 17:40:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x1f000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1615.891728][ T2119] 0 pages HighMem/MovableOnly [ 1615.919536][ T2119] 349380 pages reserved [ 1615.944069][ T2119] 0 pages cma reserved [ 1615.966303][ T2119] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=8359,uid=0 [ 1616.085135][ T2119] Out of memory: Killed process 8359 (syz-executor.0) total-vm:74836kB, anon-rss:3424kB, file-rss:34624kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1616.223021][ T1143] oom_reaper: reaped process 2119 (syz-executor.1), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB [ 1616.240074][ T2160] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 17:40:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) [ 1616.300216][ T2160] CPU: 1 PID: 2160 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1616.308835][ T2160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1616.318894][ T2160] Call Trace: [ 1616.322196][ T2160] dump_stack+0x188/0x20d [ 1616.326540][ T2160] dump_header+0x10b/0x826 [ 1616.332069][ T2160] oom_kill_process.cold+0x10/0x15 [ 1616.337210][ T2160] out_of_memory+0x31f/0x12f0 [ 1616.341920][ T2160] ? oom_killer_disable+0x270/0x270 [ 1616.347141][ T2160] ? mutex_trylock+0x246/0x2c0 [ 1616.351917][ T2160] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1616.358603][ T2160] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1616.365227][ T2160] ? warn_alloc+0x110/0x110 [ 1616.369782][ T2160] __alloc_pages_nodemask+0x5d9/0x810 [ 1616.375172][ T2160] ? mutex_trylock+0x2c0/0x2c0 [ 1616.379953][ T2160] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1616.386768][ T2160] ? wait_for_completion+0x270/0x270 [ 1616.392075][ T2160] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1616.398511][ T2160] alloc_pages_current+0xff/0x200 [ 1616.403550][ T2160] ion_page_pool_alloc+0x186/0x280 [ 1616.408676][ T2160] ion_system_heap_allocate+0x321/0xb00 [ 1616.414330][ T2160] ? ion_system_heap_free+0x240/0x240 [ 1616.419708][ T2160] ? kfree+0x1eb/0x2b0 [ 1616.423819][ T2160] ? ion_ioctl+0x9da/0xca0 [ 1616.428269][ T2160] ? lockdep_hardirqs_on+0x463/0x620 [ 1616.433566][ T2160] ion_ioctl+0x37a/0xca0 [ 1616.437835][ T2160] ? _ion_buffer_destroy+0xa0/0xa0 [ 1616.442979][ T2160] ? ksys_dup3+0x3c0/0x3c0 [ 1616.447406][ T2160] ? __x64_sys_futex+0x380/0x4f0 [ 1616.452361][ T2160] ? _ion_buffer_destroy+0xa0/0xa0 [ 1616.457485][ T2160] ksys_ioctl+0x11a/0x180 [ 1616.461826][ T2160] __x64_sys_ioctl+0x6f/0xb0 [ 1616.466418][ T2160] ? lockdep_hardirqs_on+0x463/0x620 [ 1616.471719][ T2160] do_syscall_64+0xf6/0x7d0 [ 1616.476237][ T2160] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1616.482133][ T2160] RIP: 0033:0x45c829 [ 1616.486035][ T2160] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1616.505652][ T2160] RSP: 002b:00007fbdaeabec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1616.514227][ T2160] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1616.522382][ T2160] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1616.530357][ T2160] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1616.538339][ T2160] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1616.546318][ T2160] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaeabf6d4 [ 1616.829782][ T2160] Mem-Info: [ 1616.833217][ T2160] active_anon:216543 inactive_anon:6176 isolated_anon:0 [ 1616.833217][ T2160] active_file:2997 inactive_file:15676 isolated_file:0 [ 1616.833217][ T2160] unevictable:0 dirty:0 writeback:13 unstable:0 [ 1616.833217][ T2160] slab_reclaimable:18919 slab_unreclaimable:155061 [ 1616.833217][ T2160] mapped:58619 shmem:6419 pagetables:4572 bounce:0 [ 1616.833217][ T2160] free:842422 free_pcp:403 free_cma:0 [ 1616.961075][ T2160] Node 0 active_anon:845044kB inactive_anon:16460kB active_file:20kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216368kB dirty:0kB writeback:12kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 303104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:40:34 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)) r4 = dup(r3) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:34 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1616.991495][ T2160] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1617.042741][ T2160] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1617.050022][ T2160] Node 0 DMA32 free:49196kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:843960kB inactive_anon:16460kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11620kB pagetables:14684kB bounce:0kB free_pcp:800kB local_pcp:280kB free_cma:0kB [ 1617.085842][ T2160] lowmem_reserve[]: 0 0 0 0 0 [ 1617.101676][ T2160] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:40:34 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={r3}) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000100)='gtp\x00') r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008010}, 0x4001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1617.231746][ T2160] lowmem_reserve[]: 0 0 0 0 0 [ 1617.249725][ T2160] Node 0 DMA: 12*4kB (ME) 30*8kB (UME) 47*16kB (UME) 29*32kB (UME) 2*64kB (UM) 0*128kB 2*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10288kB [ 1617.324251][ T2160] Node 0 DMA32: 111*4kB (UME) 305*8kB (UME) 100*16kB (UME) 17*32kB (UME) 1*64kB (M) 121*128kB (U) 57*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 37732kB [ 1617.451485][ T2160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1617.522488][ T2160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.569964][ T2160] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1617.613308][ T2160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1617.653658][ T2160] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1617.686094][ T2160] 13314 total pagecache pages [ 1617.691181][ T2160] 0 pages in swap cache [ 1617.697432][ T2160] Swap cache stats: add 0, delete 0, find 0/0 [ 1617.703937][ T2160] Free swap = 0kB [ 1617.708897][ T2160] Total swap = 0kB [ 1617.713061][ T2160] 1965979 pages RAM [ 1617.717718][ T2160] 0 pages HighMem/MovableOnly [ 1617.722828][ T2160] 349380 pages reserved [ 1617.732038][ T2160] 0 pages cma reserved [ 1617.753137][ T2160] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=2114,uid=0 17:40:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1617.837371][ T2173] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1617.879961][ T2173] CPU: 0 PID: 2173 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1617.888582][ T2173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1617.898656][ T2173] Call Trace: [ 1617.901958][ T2173] dump_stack+0x188/0x20d [ 1617.906296][ T2173] dump_header+0x10b/0x826 [ 1617.910716][ T2173] oom_kill_process.cold+0x10/0x15 [ 1617.915826][ T2173] out_of_memory+0x31f/0x12f0 [ 1617.920529][ T2173] ? oom_killer_disable+0x270/0x270 [ 1617.925727][ T2173] ? mutex_trylock+0x246/0x2c0 [ 1617.930489][ T2173] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1617.937172][ T2173] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1617.944229][ T2173] ? warn_alloc+0x110/0x110 [ 1617.948765][ T2173] __alloc_pages_nodemask+0x5d9/0x810 [ 1617.954199][ T2173] ? mutex_trylock+0x2c0/0x2c0 [ 1617.959223][ T2173] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1617.966006][ T2173] ? wait_for_completion+0x270/0x270 [ 1617.971292][ T2173] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1617.977724][ T2173] alloc_pages_current+0xff/0x200 [ 1617.982766][ T2173] ion_page_pool_alloc+0x186/0x280 [ 1617.987897][ T2173] ion_system_heap_allocate+0x321/0xb00 [ 1617.993508][ T2173] ? ion_system_heap_free+0x240/0x240 [ 1617.998890][ T2173] ? kfree+0x1eb/0x2b0 [ 1618.002996][ T2173] ? ion_ioctl+0x9da/0xca0 [ 1618.007421][ T2173] ? lockdep_hardirqs_on+0x463/0x620 [ 1618.012735][ T2173] ion_ioctl+0x37a/0xca0 [ 1618.017004][ T2173] ? _ion_buffer_destroy+0xa0/0xa0 [ 1618.022148][ T2173] ? ksys_dup3+0x3c0/0x3c0 [ 1618.026580][ T2173] ? __x64_sys_futex+0x380/0x4f0 [ 1618.031541][ T2173] ? _ion_buffer_destroy+0xa0/0xa0 [ 1618.036666][ T2173] ksys_ioctl+0x11a/0x180 [ 1618.041014][ T2173] __x64_sys_ioctl+0x6f/0xb0 [ 1618.045611][ T2173] ? lockdep_hardirqs_on+0x463/0x620 [ 1618.050906][ T2173] do_syscall_64+0xf6/0x7d0 [ 1618.055423][ T2173] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1618.061325][ T2173] RIP: 0033:0x45c829 [ 1618.065227][ T2173] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1618.084834][ T2173] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1618.093344][ T2173] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1618.101331][ T2173] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1618.109313][ T2173] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1618.117296][ T2173] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1618.125278][ T2173] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:40:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x3f000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @reserved="9ca3015135699357c54b1cc6f33cf0c17e1450be031c0b97ddeffa05ea6b4d5f"}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1618.478045][ T2173] Mem-Info: [ 1618.481670][ T2173] active_anon:216535 inactive_anon:6176 isolated_anon:0 [ 1618.481670][ T2173] active_file:3047 inactive_file:15689 isolated_file:0 [ 1618.481670][ T2173] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1618.481670][ T2173] slab_reclaimable:18855 slab_unreclaimable:155076 [ 1618.481670][ T2173] mapped:58634 shmem:6419 pagetables:4607 bounce:0 [ 1618.481670][ T2173] free:708964 free_pcp:508 free_cma:0 17:40:36 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = pkey_alloc(0x0, 0x0) pkey_free(r0) pkey_free(r0) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000300)=ANY=[@ANYBLOB="e8616e55461b3840cb5754576e2a8a4816073a7af6221568f83e821e6f46a7ad09752bc821ecae245d26b1fdc453283d65da431e5295e270e0f9e989c703d4716457f243cbb26e", @ANYRES16=r4, @ANYBLOB="0907000000000000000001000000e01fcf12af77a13f71741c0aa24ec1b91b4317a25b223e9d0e394d27e20d2c84c8a726afafae8d688a50090c6adc1135d9fae4affbd41620575df20f3373e1690364f9b9c2edfdbecd4c2afeffbc14bd729d22b9a1bb51b77bf389924748234f02f7bdeb3408045d7086e9d58a3f1b6b41f342367bbb8c245581b1eb3eb545ca84c44d395f506f6b7601bbc0ecbbd0d2907dfc67ab593ba395160a9b547ea0ba2e"], 0x14}}, 0x0) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200840, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044084}, 0x80) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20\x00', 0xc0100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffc6, 0x1, 0xffffffffffffffff, 0x3000000}) [ 1618.677564][ T2204] warn_alloc: 20 callbacks suppressed [ 1618.677582][ T2204] syz-executor.2: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1618.716086][ T2173] Node 0 active_anon:848908kB inactive_anon:16460kB active_file:20kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216368kB dirty:12kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 303104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1618.813750][ T2204] CPU: 1 PID: 2204 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1618.822367][ T2204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1618.829458][ T2173] Node 0 DMA free:10280kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1618.832445][ T2204] Call Trace: [ 1618.832475][ T2204] dump_stack+0x188/0x20d [ 1618.832498][ T2204] warn_alloc.cold+0x87/0x164 [ 1618.832520][ T2204] ? zone_watermark_ok_safe+0x260/0x260 [ 1618.832541][ T2204] ? ___might_sleep+0x15a/0x2b0 [ 1618.884614][ T2204] ? __alloc_pages_direct_compact+0x366/0x420 [ 1618.890667][ T2204] ? get_page_from_freelist+0x3580/0x3580 [ 1618.896375][ T2204] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1618.902948][ T2204] ? get_page_from_freelist+0x1767/0x3580 [ 1618.908658][ T2204] ? warn_alloc+0x110/0x110 [ 1618.913164][ T2204] ? __isolate_free_page+0x610/0x610 [ 1618.918436][ T2204] __alloc_pages_nodemask+0x5d9/0x810 [ 1618.923876][ T2204] ? mutex_trylock+0x2c0/0x2c0 [ 1618.928621][ T2204] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1618.935473][ T2204] ? mark_lock+0x12b/0xf10 [ 1618.939872][ T2204] ? wait_for_completion+0x270/0x270 [ 1618.945140][ T2204] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1618.951563][ T2204] alloc_pages_current+0xff/0x200 [ 1618.956591][ T2204] ion_page_pool_alloc+0x186/0x280 [ 1618.961694][ T2204] ion_system_heap_allocate+0x321/0xb00 [ 1618.967234][ T2204] ? ion_system_heap_free+0x240/0x240 [ 1618.972591][ T2204] ? kfree+0x1eb/0x2b0 [ 1618.977599][ T2204] ? ion_ioctl+0x9da/0xca0 [ 1618.981997][ T2204] ? lockdep_hardirqs_on+0x463/0x620 [ 1618.987267][ T2204] ion_ioctl+0x37a/0xca0 [ 1618.991517][ T2204] ? _ion_buffer_destroy+0xa0/0xa0 [ 1618.997152][ T2204] ? ksys_dup3+0x3c0/0x3c0 [ 1619.001551][ T2204] ? __x64_sys_futex+0x380/0x4f0 [ 1619.006491][ T2204] ? _ion_buffer_destroy+0xa0/0xa0 [ 1619.011594][ T2204] ksys_ioctl+0x11a/0x180 [ 1619.015907][ T2204] __x64_sys_ioctl+0x6f/0xb0 [ 1619.020495][ T2204] ? lockdep_hardirqs_on+0x463/0x620 [ 1619.025770][ T2204] do_syscall_64+0xf6/0x7d0 [ 1619.030267][ T2204] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1619.036156][ T2204] RIP: 0033:0x45c829 [ 1619.040049][ T2204] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1619.059629][ T2204] RSP: 002b:00007fbdaeabec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1619.068035][ T2204] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1619.075986][ T2204] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1619.083962][ T2204] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1619.091914][ T2204] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1619.099866][ T2204] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaeabf6d4 [ 1619.121197][ T2173] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1619.149978][ T2173] Node 0 DMA32 free:41480kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:847824kB inactive_anon:16460kB active_file:20kB inactive_file:8kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11508kB pagetables:14620kB bounce:0kB free_pcp:1972kB local_pcp:484kB free_cma:0kB 17:40:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x40000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1619.326113][ T2173] lowmem_reserve[]: 0 0 0 0 0 [ 1619.352080][ T2173] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.529517][ T2204] Mem-Info: [ 1619.550461][ T2204] active_anon:217093 inactive_anon:6176 isolated_anon:0 [ 1619.550461][ T2204] active_file:3040 inactive_file:15709 isolated_file:0 [ 1619.550461][ T2204] unevictable:0 dirty:26 writeback:0 unstable:0 [ 1619.550461][ T2204] slab_reclaimable:18841 slab_unreclaimable:155314 [ 1619.550461][ T2204] mapped:58731 shmem:6419 pagetables:4668 bounce:0 [ 1619.550461][ T2204] free:721411 free_pcp:280 free_cma:0 [ 1619.559196][ T2173] lowmem_reserve[]: 0 0 0 0 0 17:40:37 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1619.714180][ T2173] Node 0 DMA: 12*4kB (ME) 31*8kB (UME) 46*16kB (UME) 28*32kB (UME) 3*64kB (UM) 0*128kB 2*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10312kB [ 1619.772180][ T2204] Node 0 active_anon:848912kB inactive_anon:16460kB active_file:24kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216368kB dirty:12kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 305152kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1619.809531][ T2173] Node 0 DMA32: 215*4kB (UME) 323*8kB (UME) 116*16kB (UME) 37*32kB (UME) 325*64kB (UME) 234*128kB (UM) 78*256kB (U) 19*512kB (U) 1*1024kB (U) 0*2048kB 0*4096kB = 87956kB [ 1619.856921][ T2173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1619.872128][ T2204] Node 0 DMA free:11192kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.907317][ T2173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.943651][ T2173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1619.974930][ T2173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.018636][ T2204] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1620.031976][ T2173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 17:40:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x406000, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400800, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x2, r2}) [ 1620.058323][ T2204] Node 0 DMA32 free:56348kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:847928kB inactive_anon:16460kB active_file:24kB inactive_file:4kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11596kB pagetables:14768kB bounce:0kB free_pcp:868kB local_pcp:356kB free_cma:0kB [ 1620.111766][ T2173] 13327 total pagecache pages [ 1620.128707][ T2173] 0 pages in swap cache [ 1620.143334][ T2173] Swap cache stats: add 0, delete 0, find 0/0 [ 1620.166919][ T2173] Free swap = 0kB [ 1620.179993][ T2173] Total swap = 0kB [ 1620.196931][ T2173] 1965979 pages RAM [ 1620.214524][ T2173] 0 pages HighMem/MovableOnly [ 1620.224730][ T2204] lowmem_reserve[]: 0 0 0 0 0 [ 1620.243205][ T2173] 349380 pages reserved [ 1620.254383][ T2204] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1620.294814][ T2173] 0 pages cma reserved [ 1620.324820][ T2173] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=2171,uid=0 [ 1620.395630][ T2173] Out of memory: Killed process 2173 (syz-executor.3) total-vm:74840kB, anon-rss:2216kB, file-rss:35880kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 1620.434819][ T2204] lowmem_reserve[]: 0 0 0 0 0 [ 1620.457713][ T2204] Node 0 DMA: 13*4kB (UME) 25*8kB (UME) 46*16kB (UME) 28*32kB (UME) 2*64kB (UM) 1*128kB (U) 2*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 0*4096kB = 10332kB [ 1620.495011][ T1143] oom_reaper: reaped process 2173 (syz-executor.3), now anon-rss:0kB, file-rss:34808kB, shmem-rss:0kB [ 1620.541465][ T2204] Node 0 DMA32: 294*4kB (UME) 397*8kB (UME) 110*16kB (UME) 27*32kB (UME) 812*64kB (UME) 277*128kB (UM) 107*256kB (U) 24*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 134080kB [ 1620.626826][ T2204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1620.669707][ T2204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.734555][ T2204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1620.783135][ T2204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1620.838909][ T2204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1620.888499][ T2204] 13330 total pagecache pages [ 1620.915563][ T2204] 0 pages in swap cache [ 1620.936438][ T2204] Swap cache stats: add 0, delete 0, find 0/0 [ 1620.962926][ T2204] Free swap = 0kB [ 1620.978905][ T2204] Total swap = 0kB [ 1620.993922][ T2204] 1965979 pages RAM [ 1621.008339][ T2204] 0 pages HighMem/MovableOnly [ 1621.030552][ T2204] 349380 pages reserved [ 1621.052813][ T2204] 0 pages cma reserved 17:40:38 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x7) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) accept$unix(r1, 0x0, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0xa, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x10010005, 0x2, 0x1, r4, 0x3000000}) socket(0xa, 0xd, 0x1f) 17:40:38 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x44020000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:39 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400280, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x8040) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x40) r6 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 1: set_mempolicy(0x8000, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x46020000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:40 executing program 2: syz_emit_ethernet(0x1a, &(0x7f0000000040)={@dev={[], 0x15}, @dev={[], 0x10}, @void, {@llc_tr={0x11, {@snap={0x155, 0x1, ':', '~y;', 0x884c, "3523bc26"}}}}}, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x301000, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140)=0x1) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RSYMLINK(r1, &(0x7f0000000040)={0x14, 0x11, 0x1, {0x4, 0x4, 0x2}}, 0x14) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x6) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000001c0)={0xf0, 0x320, 0x80, 0x1e0, 0x5, 0x1f, 0x1, 0x1, {0x2, 0x3, 0x1}, {0x5, 0x6ae26102, 0x1}, {0x5, 0xfff, 0x1}, {0xffffff18, 0x3f, 0x1}, 0x1, 0x102, 0x0, 0x3ff, 0x1, 0x2, 0x6, 0x6, 0x1, 0x1ff, 0x57d1, 0x8000, 0x2e, 0x200, 0x2, 0x6}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f0000000080)) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f0000000040)) fsetxattr$security_evm(r9, &(0x7f0000000100)='security.evm\x00', &(0x7f0000000140)=@ng={0x4, 0x10, "edf5ea4032b5810bd2997301f2884991d130bb24"}, 0x16, 0x0) 17:40:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x48000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:41 executing program 1: set_mempolicy(0xc003, &(0x7f00000000c0)=0x40, 0x6) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x10c00, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000100)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x0, 0x0) 17:40:41 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:41 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 17:40:41 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x33, 0x20, 0x10, 0x16, 0x6, 0x6, 0x9, 0xda, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20421, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast1, 0x200}}, 0x24) r6 = pkey_alloc(0x0, 0x0) pkey_free(r6) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, r6) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000080)=0x3ff) 17:40:42 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae02, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) 17:40:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4919a3fe, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:42 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:42 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:43 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4a000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:43 executing program 2: sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x840) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ocfs2_control\x00', 0x61a803, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r4, 0x0, 0x10}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r4, 0x4}, 0x8) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x52000, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000480)={[], 0x2, 0x6, 0x9, 0x0, 0x7fff, 0xf000, 0x1000, [], 0x8}) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000080)={0x5, 0x2}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') socket$can_bcm(0x1d, 0x2, 0x2) 17:40:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4a060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:44 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:46 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:46 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)) fadvise64(r3, 0x65dffa63, 0x2, 0x2) 17:40:46 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:46 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4b060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:46 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x2, 0x20400) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000200)=0x40) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xf8195c6c2f6b8259}, 0x8000) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x2000000000000000, 0x1) ioctl$VHOST_GET_FEATURES(r6, 0x8008af00, &(0x7f0000000300)) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) ioctl$CAPI_GET_PROFILE(r4, 0xc0404309, &(0x7f0000000040)=0x80) 17:40:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4c000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:47 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:47 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1629.995701][ T2402] warn_alloc: 7 callbacks suppressed [ 1629.995720][ T2402] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1630.115413][ T2402] CPU: 1 PID: 2402 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 1630.124015][ T2402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1630.134074][ T2402] Call Trace: [ 1630.137390][ T2402] dump_stack+0x188/0x20d [ 1630.141829][ T2402] warn_alloc.cold+0x87/0x164 [ 1630.146529][ T2402] ? zone_watermark_ok_safe+0x260/0x260 [ 1630.152092][ T2402] ? ___might_sleep+0x15a/0x2b0 [ 1630.156965][ T2402] ? __alloc_pages_direct_compact+0x366/0x420 [ 1630.163056][ T2402] ? get_page_from_freelist+0x3580/0x3580 [ 1630.168799][ T2402] ? __isolate_free_page+0x610/0x610 [ 1630.174115][ T2402] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1630.180768][ T2402] ? get_page_from_freelist+0x1767/0x3580 [ 1630.186515][ T2402] ? warn_alloc+0x110/0x110 [ 1630.191046][ T2402] ? __isolate_free_page+0x610/0x610 [ 1630.196365][ T2402] __alloc_pages_nodemask+0x5d9/0x810 [ 1630.202885][ T2402] ? mutex_trylock+0x2c0/0x2c0 [ 1630.207668][ T2402] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1630.214451][ T2402] ? mark_lock+0x12b/0xf10 [ 1630.218885][ T2402] ? wait_for_completion+0x270/0x270 [ 1630.224216][ T2402] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1630.230995][ T2402] alloc_pages_current+0xff/0x200 [ 1630.236067][ T2402] ion_page_pool_alloc+0x186/0x280 [ 1630.241204][ T2402] ion_system_heap_allocate+0x321/0xb00 [ 1630.246778][ T2402] ? ion_system_heap_free+0x240/0x240 [ 1630.252700][ T2402] ? kfree+0x1eb/0x2b0 [ 1630.256788][ T2402] ? ion_ioctl+0x9da/0xca0 [ 1630.262206][ T2402] ? lockdep_hardirqs_on+0x463/0x620 [ 1630.267520][ T2402] ion_ioctl+0x37a/0xca0 [ 1630.271794][ T2402] ? _ion_buffer_destroy+0xa0/0xa0 [ 1630.276934][ T2402] ? ksys_dup3+0x3c0/0x3c0 [ 1630.281373][ T2402] ? __x64_sys_futex+0x380/0x4f0 [ 1630.286335][ T2402] ? _ion_buffer_destroy+0xa0/0xa0 [ 1630.291586][ T2402] ksys_ioctl+0x11a/0x180 [ 1630.295949][ T2402] __x64_sys_ioctl+0x6f/0xb0 [ 1630.300558][ T2402] ? lockdep_hardirqs_on+0x463/0x620 [ 1630.305863][ T2402] do_syscall_64+0xf6/0x7d0 [ 1630.310394][ T2402] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1630.316299][ T2402] RIP: 0033:0x45c829 [ 1630.320203][ T2402] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1630.340771][ T2402] RSP: 002b:00007fe2c2713c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1630.349368][ T2402] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1630.357354][ T2402] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1630.365334][ T2402] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1630.373310][ T2402] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1630.381290][ T2402] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fe2c27146d4 17:40:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4c020000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:48 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:48 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:48 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r5, r7, r9) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r11) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000001580)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000006300)=[{&(0x7f00000015c0)={0x22ac, 0x3b, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x113a, 0x76, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @uid}, @generic="a295e7f244fe93e13dea4f18425514fdbd50ed7614a1028fbe3adf7777d70ada9abf13dab03a8d00b7f082cd", @generic="bc4cdfd246898e620284bbae024f3ac88485d869db9ee68cfc0b1da3b959d77e615a2a98aad3d3d2ba0017e8fa6422df80a34bc94fdf9b4282ad7e98f3122a4e26c5d1a674283ef37c21e6fb504cd96433d8555f293cff379015bd1b9eb1bb593ced4a3c5352112efb09c2d9ddcfa016896eb8aa588c6eb39b2aa820b95a9215dbf7ffb307e7a76e07f25c12689dfbfc", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@private1}, @generic="0f32dd061c2b0eed4213d67e445853e61f671d7dce0170c249cb5362f63d7e20f8298fc2c95c6cb2ebe287ca1c66c9f00cf03c5adb89bbe8f0010133cd20458b310ae576f1e6463fe65972b03822e05e53b5", @typed={0x8, 0x5, 0x0, 0x0, @str=':.@\x00'}, @typed={0x1004, 0x71, 0x0, 0x0, @binary="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"}]}, @generic="36e960a624f6788b37b0dd5a7b199fde8da9d986e84f322c2e76c8c376cc7f1d63c150cccc9fbeb522e9dd4e71c81ed5223857a920976d2d6aad8fec1ebf69c45a69181126f188822b213405ad192d068de4e2022b460b0a1e338ebb64bdc60c27e9e733288ed9f98e37aaa47c47177e24f8cb7e37311e4e4ff6f43537328eaf588b4dcf582fff1c5a08080be03150234a38cb5b8962be331371b42433bf4ef3c208e04151ba13e0440c0c148315ef59bfa9f07dc4cc8f0f31fd810790", @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @uid}, @nested={0x10, 0x16, 0x0, 0x1, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0x6}]}, @generic="1882c1de703d81a15bcbd3becbcab21f81b3c6c4aec01095202e00dc718cbdb96349f607249ab3a62b70dd422ec64d716931cef8876498abab62795bd391f59db26231ec96e12ad05250561c592e31ec5c0acd4b3d6d294d59905e23c83c01ce9bef5b90fbaa991516e5530400395ef1c76d279bb2c0c4465c8833b83aaccf8fd5f3"]}, 0x22ac}, {&(0x7f0000003900)={0x1c0, 0x24, 0x8, 0x70bd25, 0x25dfdbfb, "", [@generic="08937fb05d05c10e822769d3341e4356b997845ab6ac677a0142c538658bc5de187cab712ef4983276197a36f6da9d3d7d0713778ebb01d634d9923dba0f7db134929ef6fddb0399a2b2af5644e8b7b56be4e5139ac9f8c1f81c63ba21239940e3c37fdcc8dd846da13ed0dc894b78d77f4cf954e77086d266ccf0adcf65c5bc1d463ace1d", @generic="dfcaa4796710cd45eb30617311cc9d75a20a96d5e60eb72f3edca1e94d45d0e1bfc1dad380b47557013b617fac05e83fadc1ddcc1d36068160cb830e57b3f3e5c4f35be246bbecb8b568eab61179cf3cdcca17dc54be1215c639ac830a0ca770f14f8dfbcbec52b6f7c947ae2845e3404f46e52f26f554b3aa057800b006842cf320cf3cab9fbbd0b7106ea73411ac53df259a4028", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@remote}, @typed={0x5, 0x77, 0x0, 0x0, @str='\x00'}, @nested={0x78, 0x20, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @uid}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x5}, @generic="e4a6d2d5b3e35c4187b3cbaff69daff57fa47a1a33ff68e7129495da2dcf7c7cb5bcdd651c75c5d36905c74a86ce416976997344092505f1f9f0109759f5669036590e89abf18a25173d42028b3d343881c283a87ef19c33e29052b10b3a1f16956468e1"]}, @nested={0xc, 0x24, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid}]}]}, 0x1c0}, {&(0x7f0000003ac0)={0x27e4, 0x1d, 0x400, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x23, 0x0, 0x0, @pid}, @nested={0xf4, 0x8, 0x0, 0x1, [@generic="f746412c99e16747a5dd64fd1140b6906311f10f27e7afd804c1d2fc98d6de2fd5cfca69c3499e2f154c85c6fcfd495d2815acde0c7a7a7a8a7bd0b0eb160d83d490959aa99aacc737357b833895a3559f8720abe4d023c00771333117485208cd27", @typed={0x8, 0xc, 0x0, 0x0, @u32=0x80}, @generic="5b147ba7d096f24887a992bd0e76d176fbc755bf8cb99a91a24f15a072c0e20b99400c1ed6c24b877f135320f62c8b2bd461e4988c3f2951951c691fe45d64c36dce95a71c210dc3708c9db019296b", @generic="5643b421a9169eaaabde54d89a444f09af2e97eb6e0edda587ac240595fe5432ffa2ffef193a82a5676ee1f3fb05e24f1b814b4bb163a0"]}, @nested={0x1144, 0x8c, 0x0, 0x1, [@typed={0x72, 0x29, 0x0, 0x0, @binary="3703c0f2ed87c9ecc8791984be89d7cd4239de86e8114e5f499311d1f525f425223882460daeca324ea9de3ec9155358a85da29f34a42a180fb1b187405b946931cbd5335304140f45f88fc6a102e13deea0be8acea01566673a4d764ef86b223119b723a3298bebea94ff7bfc5f"}, @generic="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", @generic="469bd1dd9985114a1e424d68ab12d97cbd4b000532f9b755f8cb7e14ccd945b077638b0ed3fb7854abd5495686d9cc680244a86bcb5b14858ecd153b403f12b0c32e9371007a16780abff08c4ee62c3a9368173e2599a24b5d8ac34b7a07adbbbac805662fc284f10571c64a03e600703965d1de4cd5779ed200c305f864f6a380d7567daaf897f831c1c5150f4ef6fa5ff27d32cb455568514b6892b030ce2a0337c1f1138f8541f47556ff8e7fd0f627f1834cd14368581b1108f03e8ff3b4807f30ac89a017cf86c77c33"]}, @nested={0x1a5, 0x32, 0x0, 0x1, [@generic="ab275cbc72aa1eafa7d55feff92010bdf289df6201430dd118ab7a27b097b3d03ebe95b826854b35cf45454e71769e8c4cd0039e75c79d9abda93db35595", @generic="593b5f1dbd597eabb7691076f02a07391d5b6fb62531acd800865966fbb098ae48247630c6e66791d881185183daec6a9239664379f04377a7f551ac73c732f6cf84315783c9d86bab5c0d8ae1a53b38388302ddd618e85b90fe343e4cff232254ca55eb", @generic="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"]}, @nested={0x304, 0x61, 0x0, 0x1, [@generic="94d1165a29f78d5fb83c358501f3ce29915c40fdaf9970d6972edd33a0c5e473197d450cc33984eb653d27c2cb6b7acfb7f1a6631e1cf5bb6153bc2dcd9647bdbb02b4877c6c5e2785be86cb0d9607de10e4e2f9675b1f52c17a413433a5d7c354fd9ea278308f00a396700039966062cb4e8b3d8d6489c2f4c1a67973f7a341326cb9ead8f6727aafb654f088ae846666049636e231505e3bb7", @generic="1b769c88042eaf8dbdd5b09bf18822f3faeb878a4255af8e85137f984abb6194c89083f759af60d8d336", @generic="405423dd946e42d53b2a8345b54cb95786480527d3479faf1433063c47a9925a40cc802f68ffd5d634b23a33764503112f8f70eda0209814bdec6a2d4ba4ba2052cf2165ec9380fb63efdc4248103aa5a7c8be68364819d4d4e7f20146e39dc924acb7d11d683df1e8f168d1c46690a1766045ce4851e89f4d3661525b42bb847611f72382ae07bb1826860e105f1dcaadc9d50893f31d947d025f7d02c1e10eeecc853ea715e3c71e8cc9d9d281ad5fb520c14047ebd86ce8b62ed6ff927b3b8ecc86cbe1c7a9e470877700b82b0815cd46778f69ec9e68d4f824732db59021f4430afcf2", @generic="26f6ec43f9d9706c5cf47f1e0348ff38497743dc23d59892edbcdde577b06b9fca4db7407afc1f0e793b590a14ec7bd7a09df31a0439f359212aa06b4fd993681ff6cbb4c2fa878df17e455d9bfbadaf06cacc9abb040fdcc6951eb0d828b64d726972dc265fa750ae773d0a5c8cff66395934b15d134ab3a730273e694b9fa39d5dda079540bf100ef4f8f94e75f039c30af2bdaace5b02b6f4494034b135d584211b0a5ce3e6418165cdc4bd167f1e16411d136ec99c534faebda43224505d912d9ccf5499efbf418e916ab1c09229d3e2c64ec538bfd421808c3b10ffdd7ed006d2249160", @generic="5c62cd889dca5e6bedf3d6283ee98fe0dadd7f6d79d180613b5444c5ef2fd25527e8e1c0463d0e899e267b439c6fe06c958bdf80cf968a75d6dccd9f17963e0b60b38026aa1c258aa3442abb29b373fe02e9de717af0110d83ce43793ff08bec4b451608d8dec217ac", @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="8266ad4a3da9e5d345e8a4d154d1799e613b90bd9fe9fe176bd1fbad58fb8509fbb4d7a49a21b1279a00dc8f2460f9244b25ecfe3e6903aee08b9227e1e960cdc5f3c2ef4f66af16033811a2caba573e12e30ef2846623a96e431b0e16f4ec4bf92445842ee3b3f163146cf960aed2efb27a1b3bb48bb456d93534674fd58df89f2ab531592e664ce55c496180e57c9058e285f1fb033645089759b6e371728b0d4e83c0b95605a7fd1e9edb658ff6a40e5c9b5278f8fcf1fb24012dd5d2cb593c7e40a3acdb601a53250a922c9548", @generic="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", @typed={0xd, 0x82, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x27e4}, {&(0x7f00000062c0)={0x18, 0x24, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x24, 0x0, 0x0, @u32}]}, 0x18}], 0x4, &(0x7f0000006840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r11}}}], 0xa0, 0x4000}, 0x24000040) 17:40:48 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1631.334383][ T2402] Mem-Info: [ 1631.352090][ T2402] active_anon:217034 inactive_anon:6176 isolated_anon:0 [ 1631.352090][ T2402] active_file:2995 inactive_file:15713 isolated_file:0 [ 1631.352090][ T2402] unevictable:0 dirty:44 writeback:0 unstable:0 [ 1631.352090][ T2402] slab_reclaimable:18775 slab_unreclaimable:155997 [ 1631.352090][ T2402] mapped:58650 shmem:6419 pagetables:4657 bounce:0 [ 1631.352090][ T2402] free:804750 free_pcp:92 free_cma:0 [ 1631.567538][ T2402] Node 0 active_anon:847412kB inactive_anon:16464kB active_file:16kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216380kB dirty:44kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 303104kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1631.751782][ T2402] Node 0 DMA free:10540kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:3132kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1631.885718][ T2402] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1631.910222][ T2402] Node 0 DMA32 free:99184kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:844380kB inactive_anon:16464kB active_file:16kB inactive_file:44kB unevictable:0kB writepending:44kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11656kB pagetables:14804kB bounce:0kB free_pcp:1708kB local_pcp:1260kB free_cma:0kB [ 1631.972185][ T2402] lowmem_reserve[]: 0 0 0 0 0 [ 1631.988371][ T2402] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1632.033712][ T2402] lowmem_reserve[]: 0 0 0 0 0 [ 1632.067566][ T2402] Node 0 DMA: 55*4kB (UME) 57*8kB (UME) 49*16kB (UME) 31*32kB (UME) 11*64kB (UM) 8*128kB (U) 3*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 12628kB [ 1632.172083][ T2402] Node 0 DMA32: 2083*4kB (UME) 992*8kB (UME) 280*16kB (UME) 99*32kB (UME) 108*64kB (UM) 169*128kB (U) 276*256kB (U) 14*512kB (U) 3*1024kB (U) 1*2048kB (U) 0*4096kB = 135404kB [ 1632.238525][ T2402] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1632.259328][ T2402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.270656][ T2402] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.283217][ T2402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.293979][ T2402] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1632.312965][ T2402] 13291 total pagecache pages [ 1632.319282][ T2402] 0 pages in swap cache [ 1632.324119][ T2402] Swap cache stats: add 0, delete 0, find 0/0 [ 1632.339058][ T2402] Free swap = 0kB [ 1632.343016][ T2402] Total swap = 0kB [ 1632.352892][ T2402] 1965979 pages RAM [ 1632.370569][ T2402] 0 pages HighMem/MovableOnly [ 1632.387070][ T2402] 349380 pages reserved [ 1632.399969][ T2402] 0 pages cma reserved 17:40:50 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x500, 0x480, 0xf0, 0x960, 0x0, 0x5, 0x8, 0x1, {0x8, 0x81, 0x1}, {0x8, 0x9, 0x1}, {0x5, 0xfff}, {0x6, 0x6, 0x1}, 0x1, 0x0, 0x2, 0xffff, 0x0, 0xfffffffe, 0x8000, 0x4, 0x9, 0x8001, 0xfffffffe, 0x800, 0x2, 0x1, 0x3}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:50 executing program 0: clone(0x2000000002120500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x0, 0x200, 0x0, 0x0, 0x258, 0x2e8, 0x2e8, 0x258, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'syzkaller1\x00', 'ip6_vti0\x00'}, 0x0, 0x130, 0x170, 0x0, {}, [@common=@unspec=@cluster={{0x30, 'cluster\x00'}, {0x400}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'syzkaller1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={[], [], @empty}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [], [], 'ip_vti0\x00', 'netdevsim0\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:50 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0xa}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0xf8, r4, 0x1, 0x24, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200c40, 0x0) ioctl$PPPIOCSFLAGS(r6, 0x40047459, &(0x7f0000000140)=0xc3c401c) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4c060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:50 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x0, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000000140)=0x9, 0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000080)={0x1}) [ 1633.717974][ T2448] syz-executor.2 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1633.787484][ T2448] CPU: 1 PID: 2448 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1633.796101][ T2448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1633.806187][ T2448] Call Trace: [ 1633.809507][ T2448] dump_stack+0x188/0x20d [ 1633.813911][ T2448] dump_header+0x10b/0x826 [ 1633.818358][ T2448] oom_kill_process.cold+0x10/0x15 [ 1633.823490][ T2448] out_of_memory+0x31f/0x12f0 [ 1633.828192][ T2448] ? oom_killer_disable+0x270/0x270 [ 1633.833410][ T2448] ? mutex_trylock+0x246/0x2c0 [ 1633.838190][ T2448] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1633.844977][ T2448] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1633.851626][ T2448] ? warn_alloc+0x110/0x110 [ 1633.856169][ T2448] __alloc_pages_nodemask+0x5d9/0x810 [ 1633.861564][ T2448] ? mutex_trylock+0x2c0/0x2c0 [ 1633.866345][ T2448] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1633.873370][ T2448] ? wait_for_completion+0x270/0x270 [ 1633.878689][ T2448] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1633.886170][ T2448] alloc_pages_current+0xff/0x200 [ 1633.891335][ T2448] ion_page_pool_alloc+0x186/0x280 [ 1633.896669][ T2448] ion_system_heap_allocate+0x321/0xb00 [ 1633.903524][ T2448] ? ion_system_heap_free+0x240/0x240 [ 1633.908950][ T2448] ? kfree+0x1eb/0x2b0 [ 1633.913045][ T2448] ? ion_ioctl+0x9da/0xca0 [ 1633.917480][ T2448] ? lockdep_hardirqs_on+0x463/0x620 [ 1633.922873][ T2448] ion_ioctl+0x37a/0xca0 [ 1633.927168][ T2448] ? _ion_buffer_destroy+0xa0/0xa0 [ 1633.932489][ T2448] ? ksys_dup3+0x3c0/0x3c0 [ 1633.936921][ T2448] ? __x64_sys_futex+0x380/0x4f0 [ 1633.941886][ T2448] ? _ion_buffer_destroy+0xa0/0xa0 [ 1633.947045][ T2448] ksys_ioctl+0x11a/0x180 [ 1633.951396][ T2448] __x64_sys_ioctl+0x6f/0xb0 [ 1633.956044][ T2448] ? lockdep_hardirqs_on+0x463/0x620 [ 1633.961504][ T2448] do_syscall_64+0xf6/0x7d0 [ 1633.966054][ T2448] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1633.972652][ T2448] RIP: 0033:0x45c829 [ 1633.976585][ T2448] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1633.996220][ T2448] RSP: 002b:00007fbdaea7cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1634.004669][ T2448] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1634.013259][ T2448] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000007 [ 1634.021239][ T2448] RBP: 000000000078c040 R08: 0000000000000000 R09: 0000000000000000 [ 1634.029217][ T2448] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1634.037188][ T2448] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaea7d6d4 17:40:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4d060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:52 executing program 0: set_mempolicy(0x2, &(0x7f0000000080)=0x1, 0x5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000100)=0x8) r2 = dup(r1) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, &(0x7f0000000180)={'tunl0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(0xffffffffffffffff) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x48800, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000000c0)=0xc224) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:52 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4e060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1635.297179][ T2448] Mem-Info: [ 1635.314923][ T2448] active_anon:215492 inactive_anon:6176 isolated_anon:0 [ 1635.314923][ T2448] active_file:2996 inactive_file:15811 isolated_file:0 [ 1635.314923][ T2448] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1635.314923][ T2448] slab_reclaimable:18950 slab_unreclaimable:156221 [ 1635.314923][ T2448] mapped:58749 shmem:6419 pagetables:4618 bounce:0 [ 1635.314923][ T2448] free:768030 free_pcp:448 free_cma:0 17:40:53 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0x20, 0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) ptrace$cont(0x7, r1, 0x0, 0x2) [ 1635.547173][ T2448] Node 0 active_anon:847464kB inactive_anon:16464kB active_file:28kB inactive_file:408kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216784kB dirty:16kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:40:53 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000040)={'lo\x00', @ifru_ivalue=0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1635.706846][ T2448] Node 0 DMA free:10304kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1084kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1635.877709][ T2448] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1635.911552][ T2448] Node 0 DMA32 free:95828kB min:44124kB low:53104kB high:62084kB reserved_highatomic:0KB active_anon:846296kB inactive_anon:16464kB active_file:28kB inactive_file:368kB unevictable:0kB writepending:16kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11752kB pagetables:15172kB bounce:0kB free_pcp:1772kB local_pcp:1324kB free_cma:0kB 17:40:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1636.110361][ T2448] lowmem_reserve[]: 0 0 0 0 0 [ 1636.133217][ T2448] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1636.236457][ T2448] lowmem_reserve[]: 0 0 0 0 0 [ 1636.275855][ T2448] Node 0 DMA: 42*4kB (UME) 62*8kB (UME) 49*16kB (UME) 31*32kB (UME) 7*64kB (UM) 8*128kB (U) 3*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10312kB [ 1636.349812][ T2448] Node 0 DMA32: 2812*4kB (UE) 2094*8kB (UE) 1618*16kB (UE) 937*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 83872kB [ 1636.384219][ T2448] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1636.440117][ T2448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1636.484631][ T2448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1636.523601][ T2448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1636.570476][ T2448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1636.612500][ T2448] 13343 total pagecache pages [ 1636.632805][ T2448] 0 pages in swap cache [ 1636.657847][ T2448] Swap cache stats: add 0, delete 0, find 0/0 [ 1636.682990][ T2448] Free swap = 0kB [ 1636.701478][ T2448] Total swap = 0kB [ 1636.717366][ T2448] 1965979 pages RAM [ 1636.736275][ T2448] 0 pages HighMem/MovableOnly [ 1636.759689][ T2448] 349380 pages reserved [ 1636.778040][ T2448] 0 pages cma reserved [ 1636.797901][ T2448] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=1948,uid=0 [ 1636.859675][ T2448] Out of memory: Killed process 1948 (syz-executor.5) total-vm:75104kB, anon-rss:2236kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1636.974933][ T1143] oom_reaper: reaped process 2448 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1637.124696][ T277] tipc: TX() has been purged, node left! 17:40:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4f010000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:54 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:55 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x8400, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in=@initdev}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000240)=0xe8) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2000, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x2, {0x1f, 0x9, 0x1, 0x8}}) socket(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}]}}]}, 0x45c}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1, @in6=@private0={0xfc, 0x0, [], 0x1}, 0x4e22, 0x4, 0x4e24, 0x81, 0x2, 0x60, 0xc0, 0x0, r5}, {0x2, 0x0, 0x8, 0x0, 0x4, 0x3, 0xd95, 0x9}, {0x1, 0x80000000, 0x10000, 0xba1}, 0x7, 0x9455, 0x0, 0x1, 0x1, 0x1}, {{@in=@remote, 0x4d3}, 0x2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x3502, 0x3, 0x3, 0x6, 0x9, 0x5, 0x10001}}, 0xe8) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:55 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:55 executing program 2: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x10ba82, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r5, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r5}}, 0x18) ioctl$TCFLSH(r0, 0x540b, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x5000, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000240)={0x7, 0x6d, 0x2}, 0x7) r7 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x100, 0x0) setsockopt$inet_int(r7, 0x0, 0x15, &(0x7f0000000100)=0xde79, 0x4) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$cgroup_subtree(r8, &(0x7f0000000300)={[{0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'cpu'}, {0x2b, 'io'}, {0x2b, 'io'}]}, 0x27) 17:40:55 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0xa84283, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000280)={r6, 0x2}) ioctl$DRM_IOCTL_DMA(r5, 0xc0406429, &(0x7f0000000280)={r6, 0x1, &(0x7f0000000180)=[0x2], &(0x7f00000001c0)=[0x4, 0x7, 0x7fffffff, 0x0, 0x4, 0x5, 0xfffffffb], 0x73, 0x9, 0xc49, &(0x7f0000000200)=[0xfff, 0x5, 0x2, 0x6, 0x8000, 0xde, 0x6, 0x7ff, 0x2], &(0x7f0000000240)=[0x2, 0x9, 0xb2, 0xffffff22, 0x7, 0x800, 0x9]}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x54) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:55 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x1, 0x552e72ad744c7ff3, 0x0, 0xffffffffffffffff, 0x3000000}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000000)=0x4f) 17:40:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4f060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:56 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x20, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d02, &(0x7f0000000300)=0x31) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r6, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r6, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x140, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x38}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0xc085}, 0x48000) 17:40:56 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="b2c2f300", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf2501000000000000000b000000000c001473797a30000000001bec5f412d0a538ddc543d9904f1af0af670540ae0eeef39e0018f4c5dfee72eb7d3c119a2dc49fde68b37b719b500c3bac94a7d0802d5db7de0868a46182c552c555ae5fef86044423dc36ac6b2f71e910680228be29cc8149a1d5676a41390f5cfa14249dcc340f1f1992f20f65d773137b9c44b763c334ded0e9853681837e287f6266f8517d933325f886083ebf53d033779afc0bde66de8dc5d52602785eae64eafd21ccd1a33346dec561bedb6c2deb15b67bf125dc57e274fc8ab2d09af761045cde866270842d2f195fd06f4f3ffd8f3ec5b8df84b1e77fbd591f9a77c5627d0c527bd3f41be7a5af57b23f6ab787f59e11171ef64e87dd41beab99090b25a6bc67d6f7b85270d1bdec9a70514492339e5f944aa7846958ab3227a5d2148f7f6dbb9b0769308a4fd708c57de3e237aa90570a0807cd6b567fad7a5c9a82f94b589ffa5d72359ac0e6965931e26adcef84412413d271bb71bc612c0240650f796734ebf02ccaa89b592b408f5d8"], 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x8040) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000007c0)={r2, 0x3ff, 0x80, "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"}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x1ff, 0x5, 0x101, 0x3}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000400)={0x14, r9, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8010}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="10002abd7000fedbdf25110000000600ab0000020000050029000a0000001600bd0000800008001f0003000700"/54], 0x3c}}, 0x18) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40106614, &(0x7f0000000080)) setsockopt(r1, 0x9, 0x0, &(0x7f0000000040)="22dead3eb52bce60d934", 0xa) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x50060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:58 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x4, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000100)={0x0, 0x0, [], @raw_data=[0xfffffff9, 0x85, 0x1000, 0x4d, 0x91da, 0x10001, 0x4, 0x16, 0x1, 0x2, 0x7fff, 0xfffffbff, 0x80000001, 0x200, 0x8, 0x10001, 0x7, 0x95b, 0x10000, 0x5, 0x1, 0x5, 0x9, 0x903, 0x0, 0xdf4c, 0x10001, 0x3, 0x7ab, 0x9, 0x5, 0x7]}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000040)={0xc7ea}, 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:58 executing program 2: set_mempolicy(0x1, &(0x7f00000000c0)=0x2a, 0x1000002) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:58 executing program 0: set_mempolicy(0x8000, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000040)=""/45) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10f401, 0x0) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000100)) 17:40:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x51060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:40:58 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:59 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x34, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:59 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x8, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:59 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:40:59 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) 17:40:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x52060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:00 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x41, 0x8, 0x70bd2a, 0x25dfdbfd, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) [ 1642.358045][ T2567] warn_alloc: 11 callbacks suppressed [ 1642.358073][ T2567] syz-executor.4: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1642.471879][ T2567] CPU: 1 PID: 2567 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1642.480605][ T2567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1642.490777][ T2567] Call Trace: [ 1642.494085][ T2567] dump_stack+0x188/0x20d [ 1642.498437][ T2567] warn_alloc.cold+0x87/0x164 [ 1642.503396][ T2567] ? zone_watermark_ok_safe+0x260/0x260 [ 1642.508961][ T2567] ? ___might_sleep+0x15a/0x2b0 [ 1642.513858][ T2567] ? __alloc_pages_direct_compact+0x366/0x420 [ 1642.519962][ T2567] ? get_page_from_freelist+0x3580/0x3580 [ 1642.525695][ T2567] ? __isolate_free_page+0x610/0x610 [ 1642.531009][ T2567] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1642.537620][ T2567] ? get_page_from_freelist+0x1767/0x3580 [ 1642.543414][ T2567] ? warn_alloc+0x110/0x110 [ 1642.547954][ T2567] ? __isolate_free_page+0x610/0x610 [ 1642.553422][ T2567] __alloc_pages_nodemask+0x5d9/0x810 [ 1642.558813][ T2567] ? mutex_trylock+0x2c0/0x2c0 [ 1642.564035][ T2567] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1642.571092][ T2567] ? mark_lock+0x12b/0xf10 [ 1642.575639][ T2567] ? wait_for_completion+0x270/0x270 [ 1642.580937][ T2567] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1642.587350][ T2567] alloc_pages_current+0xff/0x200 [ 1642.592375][ T2567] ion_page_pool_alloc+0x186/0x280 [ 1642.597474][ T2567] ion_system_heap_allocate+0x321/0xb00 [ 1642.603012][ T2567] ? ion_system_heap_free+0x240/0x240 [ 1642.608885][ T2567] ? kfree+0x1eb/0x2b0 [ 1642.612947][ T2567] ? ion_ioctl+0x9da/0xca0 [ 1642.617446][ T2567] ? lockdep_hardirqs_on+0x463/0x620 [ 1642.622721][ T2567] ion_ioctl+0x37a/0xca0 [ 1642.626964][ T2567] ? _ion_buffer_destroy+0xa0/0xa0 [ 1642.632069][ T2567] ? ksys_dup3+0x3c0/0x3c0 [ 1642.636484][ T2567] ? __x64_sys_futex+0x380/0x4f0 [ 1642.642028][ T2567] ? _ion_buffer_destroy+0xa0/0xa0 [ 1642.647123][ T2567] ksys_ioctl+0x11a/0x180 [ 1642.651802][ T2567] __x64_sys_ioctl+0x6f/0xb0 [ 1642.656377][ T2567] ? lockdep_hardirqs_on+0x463/0x620 [ 1642.661733][ T2567] do_syscall_64+0xf6/0x7d0 [ 1642.666224][ T2567] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1642.672109][ T2567] RIP: 0033:0x45c829 [ 1642.677554][ T2567] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1642.697392][ T2567] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1642.705838][ T2567] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1642.713793][ T2567] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1642.721744][ T2567] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1642.729713][ T2567] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1642.737755][ T2567] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:41:01 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1644.002858][ T2567] Mem-Info: [ 1644.006329][ T2567] active_anon:219513 inactive_anon:6176 isolated_anon:0 [ 1644.006329][ T2567] active_file:2996 inactive_file:15724 isolated_file:0 [ 1644.006329][ T2567] unevictable:0 dirty:52 writeback:0 unstable:0 [ 1644.006329][ T2567] slab_reclaimable:18946 slab_unreclaimable:154181 [ 1644.006329][ T2567] mapped:58665 shmem:6419 pagetables:4667 bounce:0 [ 1644.006329][ T2567] free:945274 free_pcp:419 free_cma:0 [ 1644.160248][ T2567] Node 0 active_anon:853612kB inactive_anon:16464kB active_file:20kB inactive_file:28kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216400kB dirty:24kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 301056kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1644.279302][ T2567] Node 0 DMA free:10304kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:3152kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.423428][ T2567] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1644.450519][ T2567] Node 0 DMA32 free:310960kB min:52316kB low:61296kB high:70276kB reserved_highatomic:0KB active_anon:848180kB inactive_anon:16464kB active_file:20kB inactive_file:28kB unevictable:0kB writepending:24kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11644kB pagetables:14496kB bounce:0kB free_pcp:2704kB local_pcp:1392kB free_cma:0kB [ 1644.523984][ T2567] lowmem_reserve[]: 0 0 0 0 0 [ 1644.535191][ T2567] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1644.610514][ T2567] lowmem_reserve[]: 0 0 0 0 0 [ 1644.629931][ T2567] Node 0 DMA: 40*4kB (UE) 80*8kB (UME) 50*16kB (UME) 30*32kB (UME) 1*64kB (M) 10*128kB (U) 3*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 12352kB [ 1644.703443][ T2567] Node 0 DMA32: 4287*4kB (UME) 4175*8kB (UME) 2828*16kB (UME) 1332*32kB (UME) 582*64kB (UM) 536*128kB (UM) 223*256kB (UM) 13*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 310068kB [ 1644.769664][ T2567] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1644.825152][ T2567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.843983][ T2567] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.853355][ T2567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1644.886020][ T2567] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1644.912254][ T2567] 13300 total pagecache pages [ 1644.917462][ T2567] 0 pages in swap cache [ 1644.921760][ T2567] Swap cache stats: add 0, delete 0, find 0/0 17:41:02 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ustat(0x8, &(0x7f0000000040)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x48000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x1, 0xe1f}, 0x40, 0x6, 0x5}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x401, 0x0, 0x1, 0xffffffffffffffff, 0x3000000}) 17:41:02 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8000, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)) 17:41:02 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:02 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x6c9, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x53060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1644.934594][ T2567] Free swap = 0kB [ 1644.938348][ T2567] Total swap = 0kB [ 1644.942083][ T2567] 1965979 pages RAM [ 1644.946397][ T2567] 0 pages HighMem/MovableOnly [ 1644.951093][ T2567] 349380 pages reserved [ 1644.965411][ T2567] 0 pages cma reserved 17:41:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x20000000001, 0x9) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:03 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x54060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:04 executing program 3: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:04 executing program 2: set_mempolicy(0x0, &(0x7f0000000080)=0x8, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x430000, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x1a1081, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='\x00', 0x0, r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, r1, 0x3000000}) r4 = socket$inet6(0xa, 0x2, 0x0) dup(r4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8982, &(0x7f00000000c0)={0x6, 'vlan0\x00', {0x2}, 0x2}) 17:41:04 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x9, 0xc, 0x4, 0x400, 0x2, {}, {0x3, 0x1, 0x56, 0x0, 0x40, 0xca, "43b5f9e7"}, 0xb0, 0x0, @offset=0x9, 0x4, 0x0, r2}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) dup(r5) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'vlan1\x00', 0x0}) sendmmsg$inet6(r5, &(0x7f0000002e80)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000200)="00823417d50566a175dc500719844e71116e8f8a05ca074d21429362bb75cd5573189a8938289deae764e7f7bbd965064458a406c36a5c070865f4fa12a98f316235adbf3b2bbe70a37a6b390361681ea199ca6ec575993f4a6314ae16da97245c1f026b22bc8bf9ee961525cd5393a32997cbc96be2d24e8591ea78e6a5a2a087f182d39996403d4483338b0f7e63f208e9559e27873e70535821a8e2f9c59ffd73c51b5641baa41e65e1d2724d1e8536", 0xb1}, {&(0x7f0000000300)="fd481aa242fc7d74c048199059e6ccf7fd020d5d95cde10a34e1c8e382884a18ef8a70999cb56a5adbef9f6dff7d566b6365c4d57e53fe49d0f72477d71ef0f502b3c984b694b84e604a3d9dbf90e3ee7aced8ba697110661b5c9bd8561b35b413d27668e72e481868b57e3c317bae16355f281f25676d459be4c75abb016f491fe8a1b162ed4742dfa205d077d027894afb85bdf63539b01d1c4d10229448f972dcfdc47dd735e1efb2f9ce9d37ccf3221049a99ff3888a4504a11489c3f2d4386fdd5aa1fd673d72f9815955cdbd09a914151f5642454bfe7aa2d55b7b85bd6503a088855e7ddb", 0xe8}, {&(0x7f0000000400)="ca7820f4d281009b81b91b987d315aca167564e2450db3125f46984265085cdc0907efbe899b714b06adc4fceb01862992057ac7b3aebee1b8d6ad509119403d4e80b0770ce9547cadb2d6012b7e84ba90278175cf", 0x55}, {&(0x7f0000000480)="a9cfaf1706a877b0a5bdc4876160b671bdc5e9f8b149bfee053cc487c1bedfea5ff666d64a645e44f2e2ebd9161c6b8685288ec0c050e4ea7024a47b9292c6419fd3b0ef72a021b312874dd1", 0x4c}, {&(0x7f0000000500)="cd6e5f080fdaca78c7ae56d7346c8767bcec23a6793d0673cd4d9357ab1effd87e73a1cedf4f653d240a3d2dc2d1bd295e6aeb33564300125a142d234c2bfcd65ac5be89f42316d8ffc6b1fad38073061c1d844a3c57f48dab040b083ac0e824744303f198813d0b43f764438fba471a40e5e4cecaaf58c97f273678cf040198ac01f55bbe10b99b0005a0d2b8296b6dbfd097983ce391a326b184874d6049eefb253c0a38600f7c334638d64f9f9327c4d005d37ee4254424b803ec9dcb10ea646b0fb1818953c6fde668bf", 0xcc}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="280000000000000029000000360000000c010000000004012000000000ff01000000000000000000060000000000000024000000000000002900000032000000fe8000000000000000000000000000aa000000000000000000", @ANYRES32=r8, @ANYBLOB="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"], 0x3b0}}, {{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000b00)="01adeee9aa8874022fbd0785c953477969ed0576582bf81e75decd4d0a6ecc5a832283f03813bd465e4f6a152384e6ef9f738e04d7f00a6c7203d00547971c776301bff730b95ca32eda7b24dd6fcd496f4c811ea8d6f448aae0097b3dff01e2590334e84ba147755d4ccc94b0bffd841ee7ea6fd9518f39138b0fb357a006f1c9936915359dd476e383b70b2f2a40f0bb729d49ce064262c9f8243a933eb4ee99eae5a7c466613cc1ff28738a89fed5a535ebeb6210d81a4764ece30195b26a03f669ae02a4cec2af5a49515ec3e2b2c21dd45bd90f5435fae96d8ef9f8", 0xde}, {&(0x7f0000000c00)="7119b7885d0ca1286990403085ca5f2de0c74faadca4c97fcd1072b3d5cc5a08be8a88181f3cc2298cea47adb9f6e60ef4f34fc1cb950ad5c8992542538c141e85cf157298e1871986e864ca789aa005390a0a339b3dfab690d576979bcdd5be891b458085428a8aaaa87079d953dcb309380fa12abcac972c9d2970dd20b2d64f048d168c5bb9b2667e73c340c1258b7095a88323acd8d0199c03929f97ce6603957964e365f9317ed3acb5511891988936733903e9f1527d2ccf4654ebd4eab9ed837611500e72e2720ee0184f1f8407985aefb4a3342075377054468d1f587d7a57bcd146ddfd4b41224eb276a54f", 0xf0}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="b5982738a1e5896966aee5b8009b7c69cf467daf45723d4475a62714bcbc42b9489672e438745253bd0f25e321b59d15d83e521a972f28a22a61", 0x3a}, {&(0x7f0000001d40)="a8f8a11137d82633f05b658a52c7d6c98594509f4c185a0f9db250a942c629a37c4f756ee4961b5a94dc7786b5af830b1cad8019eb8b3546560e730c956494923ccd0ab613023977999cdf6c22fd09d54b33facb0280b229cf43457615590c9f1b0b8505e2014492efe90c71815948f5e178219eccbf3fce86115ff2de9e19b557fe4f498fa2523f68a705de1e21d64a647a81d1b97a3ca28e70b3cfd6ada2177e8bbc", 0xa3}, {&(0x7f0000001e00)="66421b8c7f9dfb0959", 0x9}, {&(0x7f0000001e40)="e40450557e9e8e957b686841698ca7c665d0008ec0ddfa50368cb1e8ce704c16433864eb6d3a1472aa5a9991734b7f5c29d95f4b52449b5679efec8189002b43776c8806abed63fa7f841de67557bf36d862ef12fd4c5663a64ba2f3f97889bffe43b1f56761d963829039de989ce9ecb36539fa471e0137212d4f458f9f45dd625164e8702a23886c5b5356a568021ebd343b8e693d433a819aa1b2c1442a2f87ed4a02156bf071d7e66e72748598f8293978586b6db1ae7df2da9e2b7bba43bc3e", 0xc2}, {&(0x7f0000001f40)="e50b61f7aa8777ec15cc1db13285f90034ce353fd138ce9ec9a3365c085e2f9fc2c967b024f38d26c952bde5f3bd920e5edd97d4ae5101a360afea07c199325446d0547db66861e23e46354559495d6635e0b74df76008d1583206fc9935db360c644fab7279f6c20ca9ef54a56b3fb4e61ae8bd2b98a1627018e678e0a3ce228abd6b42", 0x84}], 0x8, &(0x7f0000002080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x101}}, @flowinfo={{0x14, 0x29, 0xb, 0x80df}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x48}}, {{&(0x7f0000002100)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f00000025c0)=[{&(0x7f0000002140)="f1df331953bcf9e2e93fb95c46acc75563014be1fe25f8c34821e57d76467b8036785b0618f6fc8656259965e564e36d1e56693ccc41bfc6713506c655fb29ad443bf919e8977552d36709200158bfb90342a7ca2fb2a0d5ace819c183e8ac590b8209c24c379dbdba4057424141d436cc61db96ad", 0x75}, {&(0x7f00000021c0)="97a7395ea9d3d322fc63", 0xa}, {&(0x7f0000002200)="89e77370bcdda2230ee9085ea1be6c34efeac2ddc44430ddc6fe0fb156c4b668d41119882bec4640a92c967abe295681508b3c871b9eb36a2dca934f4026872bc00e20a7e14256cdb794d93b", 0x4c}, {&(0x7f0000002280)="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", 0xfc}, {&(0x7f0000002380)="e46c1e7ea12e06bfda2a7b09967c9c68cb04951fc23d51e19293f371a0621327b87e1a32187301802d5d01db4c3e368fc557399fe1c1787933679dde44c2b40eecc16e681935be3e937dc13605255a55450822d0ea67c0eb46524cb0ae2c554012f910b9afe7e9c596bb286f34798bc8d197db261df8ef965499240afa86bd1ca49dd17ade4b7abe5233795b26e779fa77a3", 0x92}, {&(0x7f0000002440)="b0524fafed09840a07948486aa264560aa2b5382e8a95f727b5b799d1e7c07c951c05e69f5a84901dd604d584ddd61a9a826c9eda55f3d8680909be4029cd8d5a7e8fd6fe3dfd0eccbdba48bb5c9492b606084538dd4e159f805886f190658144b70003b635947ae5c10da0f4c2394466314a98dd937b11dbb2c15df6e5392ee5d0ba8e3e8148467373b089cbaee58fc868181be59920322f726ca8f8c9033bb446047c0d78997550a678c1115e37527fd602ce46131302d84e9", 0xba}, {&(0x7f0000002500)="cf8e10fb78140b4a129a71bd065629cc980bdbfba5d6294f91cc858eae8f01fbb51e854f5df9d01000954d9238e7683b9d669232ddabc1b9e624b25e8329e4a177535202f63a53f0973b4563460a3ca4be0c66e88b6225e48752636e3423ddf15825b4962e0b507d4b0c5501b3ed5818058b8b6bcebd6a9afc7eb198bd89886841918f7cb79012d3da678367a5776832d30c71c810293f9e8ae4198e5261d20ccc518f026b02b232c9d7e1cd7d", 0xad}], 0x7, &(0x7f0000002f80)=ANY=[@ANYBLOB="1400000000000000290000000b000000000007ff00000000480000000000000029000000370000003206000000000000000100050200050710000000020240ffff010000000060bc008107ffe81a08322ae68502fff80001000001008a12ca5c8e521b0aa8a59d6e1b474b09fa3e1c368c48e20c443bbedb3a7af2c5b316195c6311b1f01773ade6f160cf5a1cb59bf47df5e43df78a2a"], 0x60}}, {{&(0x7f00000026c0)={0xa, 0x4e21, 0x8001, @loopback, 0x5}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000002700)="16ba523f8753a8160d25d25abfeb5a492cdd376a1dc0312e99b6670e1b2ecd9187cf8b57d2eb4cd48322fd3fa2db7f270bac11125e972ae7666c6fea5309908910418ab814269c609fb98b135f75a97326d3d2b57295357fb9ae471deeaa080c9e5cc5c778ec8086e1ca8485333e23847b0222578ea5f7056eb462275ae31fdd0a3b0ac48b2f004ffd621d1a2f638ebcc317bf16492394ebad13d90bf8522cfcbb56eeea5b913c533c471a4b85f65483416a39f76d6147be9f0c4169d6", 0xbd}, {&(0x7f00000027c0)="db13e9643e5aa1fed83a9b98d73d463b59ca3b7aa7c9bc6793e51ef3fa5966c60043aab47c270100047189213883fae7bd7979e5271967e1dc747c14642f0b", 0x3f}, {&(0x7f0000002800)="6f40c8259f44175cf73dfbea1acec9bf9d3a530bbbe05116c28d48", 0x1b}, {&(0x7f0000002840)="cbad9c91fc20e329546346f49e4eea11f2cf8f62e16a41573b1033132218037c88389072438fc4afd1a1a61cbae2198b01254cd4cbaf975967f6e358ab6a50a418fdfd22463e1bc42e48af43d20c30576a982cd6c70d3912bec832c0229ad1556126c3db3eb35755889799039ead3521d3458efa5bc6756495079fc2d93bca7648253ca49e9c860220d0f0ca641e06c22bc6a66b3668e73d062a9f33501182c052ffd5d3f4ec12df7b2995aaaa689caaf76c25bd3ea6de09a34fa2ce6ce4ae0e4c8309d9058ce24bbaf5b82bbf4ce8683203f5dc7d5408ce7d317a78ac6b0407b6", 0xe1}, {&(0x7f0000002940)="2b075827caf86d2799fae354fe25fb8d5b456d3dfbae975cad8f5ce79a6088970bf0c3fc738f48d3c7afb8a738f256e2380420cc435c9671da3a9b634f749c611c6636dbc40350cdd7c26a755eeec904f4cc7b0bc7a049fe482b9f30465464d42873c5a57f3950a24306b47d8250671ae3786db47a9557ca719f9eb826f5f0fec214e2bc34bb08d59ba2c1dd02723922", 0x90}, {&(0x7f0000002a00)="bec2f882ec0d2e3646625efea320f727141d211afe3782aef14a1bdbaf39d31b3fb167edde756c2ba51ff08d1f57b6eec8078bafd3727395fdc375566379ebf18093dd50ef8dc945a6e50130b0ec3ff5db6bc16ad132faa072250b9a53fc9978905e9300b07dec48a4bf20ed516ebaa84516987c006f01ee4572efb7abf273c5f8340c624434c73abf68e78939e7fd43467796476f9af4cbb5b1", 0x9a}, {&(0x7f0000002ac0)="60c75857e29283422c2d75b9eae3a7d3093a04243ecc7ecff4d52159dcc85ac37a834813504117b4fce2c4d091cd2f", 0x2f}], 0x7, &(0x7f0000002b80)=[@tclass={{0x14, 0x29, 0x43, 0x1e}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0x0, 0x12, 0x1, 0xaf, 0x0, [@local, @remote, @mcast1, @loopback, @loopback, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @remote, @mcast2]}}}, @rthdr={{0x28, 0x29, 0x39, {0x87, 0x2, 0x2, 0x1f, 0x0, [@ipv4={[], [], @private=0xa010102}]}}}, @dstopts={{0x60, 0x29, 0x37, {0x3, 0x8, [], [@enc_lim={0x4, 0x1, 0x3f}, @calipso={0x7, 0x28, {0x0, 0x8, 0x7, 0x20, [0x100000000, 0xffffffffffffffe0, 0x1, 0x80000001]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x5e, 0x116, [0x0]}}, @enc_lim={0x4, 0x1, 0xa9}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x741}}, @rthdr={{0x28, 0x29, 0x39, {0xc, 0x2, 0x2, 0x8, 0x0, [@loopback]}}}, @rthdr={{0x58, 0x29, 0x39, {0x8, 0x8, 0x0, 0x83, 0x0, [@ipv4={[], [], @multicast1}, @loopback, @remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8001}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3c, 0x1e, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x876f8819a5ee95d3, 0xc, 0x6, 0x20, [0xe0000, 0x5, 0x7fffffff, 0x101, 0x3, 0x5]}}, @generic={0x5, 0x5a, "93e51faf326430b4bf0104231774389fe030211d35a6ec58157c38de97d9482d43e00ca9665d686e57008cd0845b3c185dd1c85ba2bdcd1d06a9185661219b5b0a12dfdf2b1c5f895eea8b2e4a89690f4dfc689910e7742f20cb"}, @pad1, @hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x7, [0xeff, 0x0, 0x3f, 0x6]}}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x7f}]}}}], 0x300}}], 0x4, 0x8001) r9 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x0, 0x7f, 0x5, 0x0, 0x2, 0x200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x6, 0x100}, 0x4000, 0x5, 0x3817, 0x1, 0x7, 0x1, 0xb58f}, r3, 0x5, r9, 0x2) 17:41:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40040, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3000000}) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80000, 0x8a) read(r1, &(0x7f0000000100)=""/141, 0x8d) 17:41:05 executing program 3: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) clone3(&(0x7f0000001340)={0x80000000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), {0x11}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f0000000140)=""/242, &(0x7f0000001300)=[r1, r2, r3, r4], 0x4}, 0x50) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x1, [[0x6, 0x5, 0x1000, 0x2a, 0x0, 0x80000000, 0x9, 0x1], [0xfefd, 0x6, 0x7, 0x3, 0x5, 0x99d, 0x7, 0xb32], [0xfffffffa, 0x3, 0xfff, 0x9, 0x1, 0x7f, 0x3ff, 0xb38d]], [], [{0x1, 0x3, 0x0, 0x1, 0x0, 0x1}, {0x7fff, 0x7fffffff, 0x0, 0x0, 0x1, 0x1}, {0xfffffff8, 0x5, 0x1, 0x1, 0x1}, {0xe852, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x3ff, 0x4, 0x1, 0x1, 0x1, 0x1}, {0xffff26a6, 0x0, 0x0, 0x1, 0x1}, {0x52b, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x7ff, 0x404000, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x1}, {0x9, 0x129}, {0x3, 0x0, 0x0, 0x0, 0x1, 0x1}], [], 0x401}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x4, 0x70, 0x7, 0x40, 0x9f, 0x1f, 0x0, 0x2, 0x4d00, 0xf, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc253, 0x1, @perf_config_ext={0x3ff, 0x5}, 0x41008, 0xffffffffffff99bf, 0x447, 0x0, 0x1, 0x4, 0x100}) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @descriptor="02e64872a2056580"}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) 17:41:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x55060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:05 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="821f7a29ce6b234fae245119c2dc8ea5562e0b6b98f762ca84d9baf6a2c11384618a673d6a20c8e4d3d3d1306f6b1a5b660602a2819de1ea71040c2093804e7966d1b163e4007484ff79f94d441b7f27a0d085c39c00fc08ad7d0917cc2db4787497d997d393624b8740895479e4e2011a6b977ee40e7327318f878ce975e69c747ed366c74b9611bfd57248d06030367ba507292c51bdceccadaaabcda537b66604e8f951c213e93a58e858a18ae7d4ac4bcab7f95d7214913e2cb39d6c542f2c54833b3c4ba975e6f9defdb7805da1eeac6d96bc26ca5ef4c6ac75d03b6c9b41b3b15f171d4191e5b16d8b3fec486137038561068b", 0xf6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = fcntl$dupfd(r4, 0x0, r0) splice(r1, &(0x7f0000000080)=0x3, r5, &(0x7f0000000200)=0x63, 0x5, 0x2) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:05 executing program 3: set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1648.175436][ T2652] syz-executor.4 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1648.256808][ T2652] CPU: 0 PID: 2652 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1648.265948][ T2652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1648.276826][ T2652] Call Trace: [ 1648.280245][ T2652] dump_stack+0x188/0x20d [ 1648.284620][ T2652] dump_header+0x10b/0x826 [ 1648.289230][ T2652] oom_kill_process.cold+0x10/0x15 [ 1648.294817][ T2652] out_of_memory+0x31f/0x12f0 [ 1648.299849][ T2652] ? oom_killer_disable+0x270/0x270 [ 1648.305202][ T2652] ? mutex_trylock+0x246/0x2c0 [ 1648.310622][ T2652] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1648.317420][ T2652] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1648.324258][ T2652] ? warn_alloc+0x110/0x110 [ 1648.329431][ T2652] __alloc_pages_nodemask+0x5d9/0x810 [ 1648.335096][ T2652] ? mutex_trylock+0x2c0/0x2c0 [ 1648.340163][ T2652] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1648.347056][ T2652] ? wait_for_completion+0x270/0x270 [ 1648.352574][ T2652] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1648.360040][ T2652] alloc_pages_current+0xff/0x200 [ 1648.365111][ T2652] ion_page_pool_alloc+0x186/0x280 [ 1648.370489][ T2652] ion_system_heap_allocate+0x321/0xb00 [ 1648.376284][ T2652] ? ion_system_heap_free+0x240/0x240 [ 1648.381688][ T2652] ? kfree+0x1eb/0x2b0 [ 1648.385800][ T2652] ? ion_ioctl+0x9da/0xca0 [ 1648.390682][ T2652] ? lockdep_hardirqs_on+0x463/0x620 [ 1648.396087][ T2652] ion_ioctl+0x37a/0xca0 [ 1648.400550][ T2652] ? _ion_buffer_destroy+0xa0/0xa0 [ 1648.406338][ T2652] ? ksys_dup3+0x3c0/0x3c0 [ 1648.411248][ T2652] ? __x64_sys_futex+0x380/0x4f0 [ 1648.416489][ T2652] ? _ion_buffer_destroy+0xa0/0xa0 [ 1648.421914][ T2652] ksys_ioctl+0x11a/0x180 [ 1648.427694][ T2652] __x64_sys_ioctl+0x6f/0xb0 [ 1648.432371][ T2652] ? lockdep_hardirqs_on+0x463/0x620 [ 1648.438109][ T2652] do_syscall_64+0xf6/0x7d0 [ 1648.442805][ T2652] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1648.449054][ T2652] RIP: 0033:0x45c829 [ 1648.453313][ T2652] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1648.474538][ T2652] RSP: 002b:00007fea8eeedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1648.484305][ T2652] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1648.492637][ T2652] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1648.502395][ T2652] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1648.511847][ T2652] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1648.520296][ T2652] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8eeee6d4 17:41:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x56060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:07 executing program 3: set_mempolicy(0x2, 0x0, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1649.855531][ T2652] Mem-Info: 17:41:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x57060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1649.880793][ T2652] active_anon:219063 inactive_anon:6176 isolated_anon:0 [ 1649.880793][ T2652] active_file:2971 inactive_file:15747 isolated_file:0 [ 1649.880793][ T2652] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1649.880793][ T2652] slab_reclaimable:19102 slab_unreclaimable:154813 [ 1649.880793][ T2652] mapped:58683 shmem:6419 pagetables:4645 bounce:0 [ 1649.880793][ T2652] free:301696 free_pcp:379 free_cma:0 [ 1650.191435][ T2652] Node 0 active_anon:849436kB inactive_anon:16460kB active_file:20kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216396kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 296960kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1650.469701][ T2652] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1650.694659][ T2652] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1650.706556][ T2652] Node 0 DMA32 free:35704kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:848320kB inactive_anon:16460kB active_file:20kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11696kB pagetables:14828kB bounce:0kB free_pcp:468kB local_pcp:244kB free_cma:0kB [ 1650.912134][ T2652] lowmem_reserve[]: 0 0 0 0 0 [ 1650.931177][ T2652] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1651.081211][ T2652] lowmem_reserve[]: 0 0 0 0 0 [ 1651.115927][ T2652] Node 0 DMA: 12*4kB (E) 87*8kB (UME) 50*16kB (UME) 31*32kB (UME) 2*64kB (UM) 10*128kB (U) 3*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (M) 0*4096kB = 10344kB [ 1651.205093][ T2652] Node 0 DMA32: 224*4kB (UME) 320*8kB (UME) 91*16kB (UME) 983*32kB (UE) 3*64kB (U) 2*128kB (U) 0*256kB 0*512kB 4*1024kB (U) 0*2048kB 0*4096kB = 40912kB [ 1651.289106][ T2652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1651.349924][ T2652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1651.405829][ T2652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1651.456874][ T2652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1651.523483][ T2652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1651.533235][ T2652] 13299 total pagecache pages [ 1651.584170][ T2652] 0 pages in swap cache [ 1651.615143][ T2652] Swap cache stats: add 0, delete 0, find 0/0 [ 1651.642323][ T2652] Free swap = 0kB [ 1651.662731][ T2652] Total swap = 0kB [ 1651.684453][ T2652] 1965979 pages RAM [ 1651.703295][ T2652] 0 pages HighMem/MovableOnly [ 1651.709095][ T2652] 349380 pages reserved [ 1651.755245][ T2652] 0 pages cma reserved [ 1651.771514][ T2652] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.3,pid=24555,uid=0 [ 1651.847973][ T2652] Out of memory: Killed process 24555 (syz-executor.3) total-vm:75104kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 17:41:10 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x58060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:10 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockname$l2tp(r7, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) fchown(r1, r3, r5) setfsuid(r3) 17:41:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x4200, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000080)='keyringvboxnet0nodevsecurity\x91{\x00', 0x1f) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x59060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0xa}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400]}]}}]}, 0x45c}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40041) memfd_create(&(0x7f00000000c0)='systemem0md5sum$\x00', 0x0) r3 = memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) write$binfmt_elf64(r3, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000dfeb7bba00281293bd5d74dafc2038"], 0x3c) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x54c403, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x3) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1655.004624][ T2734] lo: Caught tx_queue_len zero misconfig [ 1655.013615][ T2734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 17:41:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:12 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x42) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4, 0xffffffffffffffdb, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1655.194650][ T2734] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 17:41:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5a060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:13 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000300)={{0x1, 0x6, 0x1, 0x2, 'syz1\x00', 0xffc00000}, 0x1, [0x7ff, 0x0, 0x4, 0x6f, 0x7, 0x8000, 0x400, 0x8, 0x2, 0xffffffff00000000, 0x9, 0x4, 0x1, 0x0, 0x80000001, 0x3f, 0x5, 0x1, 0x0, 0x200, 0xfff, 0x2, 0xb, 0x10000, 0x6c12, 0x0, 0x9, 0xfffffffffffffff8, 0x5, 0x3, 0x5, 0x80000001, 0xba2, 0x9f7, 0xd7, 0x6, 0x5, 0x4, 0x6, 0x6, 0xb17, 0x20, 0x6, 0x40, 0x0, 0x80000000, 0x7, 0x1ff, 0x3, 0x10000, 0x0, 0x9, 0x643, 0x24, 0x4, 0x7fffffff, 0x19, 0x3b, 0x3f, 0xe05, 0x80, 0x80, 0x0, 0x6, 0x152, 0xea2, 0x80000001, 0x0, 0x8, 0x6, 0x3, 0xfffffffffffffff8, 0xffffffffffffff81, 0x8, 0x9, 0x400000000, 0x8001, 0x200, 0xb2a, 0x80000000, 0x1, 0x3, 0xfffffffffffffff4, 0x5, 0x4, 0x9e8e, 0x10001, 0x7, 0x13e, 0x8ff, 0x5623cafa, 0x18c40000, 0x4, 0x5, 0x7, 0xfffffffffffffffa, 0xfffffffffffffff9, 0x5, 0x9, 0x3ff, 0xcaad, 0x3, 0x7ff, 0x3, 0xffffffffffffffe1, 0x5, 0x5c61c37b, 0xabf9, 0x2, 0xa895, 0x40, 0x34, 0x8, 0x1fea00000000, 0x400, 0x80, 0xc11, 0x7, 0x19f, 0x8001, 0x2796d01, 0x4, 0x1, 0x8003, 0xffffffff, 0x2, 0x7f, 0x4]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x3, 0x0) dup(r1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) 17:41:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1655.465064][ T2761] warn_alloc: 6 callbacks suppressed [ 1655.465085][ T2761] syz-executor.0: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1655.566487][ T2761] CPU: 1 PID: 2761 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 1655.575228][ T2761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1655.585489][ T2761] Call Trace: [ 1655.589057][ T2761] dump_stack+0x188/0x20d [ 1655.593497][ T2761] warn_alloc.cold+0x87/0x164 [ 1655.598284][ T2761] ? zone_watermark_ok_safe+0x260/0x260 [ 1655.603860][ T2761] ? ___might_sleep+0x15a/0x2b0 [ 1655.608735][ T2761] ? __alloc_pages_direct_compact+0x366/0x420 [ 1655.615000][ T2761] ? get_page_from_freelist+0x3580/0x3580 [ 1655.620861][ T2761] ? __isolate_free_page+0x610/0x610 [ 1655.626184][ T2761] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1655.632914][ T2761] ? get_page_from_freelist+0x1767/0x3580 [ 1655.638662][ T2761] ? warn_alloc+0x110/0x110 [ 1655.643280][ T2761] ? __isolate_free_page+0x610/0x610 [ 1655.648596][ T2761] __alloc_pages_nodemask+0x5d9/0x810 [ 1655.654330][ T2761] ? mutex_trylock+0x2c0/0x2c0 [ 1655.659228][ T2761] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1655.666013][ T2761] ? mark_lock+0x12b/0xf10 [ 1655.670460][ T2761] ? wait_for_completion+0x270/0x270 [ 1655.675842][ T2761] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1655.682466][ T2761] alloc_pages_current+0xff/0x200 [ 1655.688216][ T2761] ion_page_pool_alloc+0x186/0x280 [ 1655.693429][ T2761] ion_system_heap_allocate+0x321/0xb00 [ 1655.699109][ T2761] ? ion_system_heap_free+0x240/0x240 [ 1655.704497][ T2761] ? kfree+0x1eb/0x2b0 [ 1655.708591][ T2761] ? ion_ioctl+0x9da/0xca0 [ 1655.713041][ T2761] ? lockdep_hardirqs_on+0x463/0x620 [ 1655.718440][ T2761] ion_ioctl+0x37a/0xca0 [ 1655.722731][ T2761] ? _ion_buffer_destroy+0xa0/0xa0 [ 1655.727967][ T2761] ? ksys_dup3+0x3c0/0x3c0 [ 1655.732532][ T2761] ? __x64_sys_futex+0x380/0x4f0 [ 1655.737505][ T2761] ? _ion_buffer_destroy+0xa0/0xa0 [ 1655.742697][ T2761] ksys_ioctl+0x11a/0x180 [ 1655.747053][ T2761] __x64_sys_ioctl+0x6f/0xb0 [ 1655.751659][ T2761] ? lockdep_hardirqs_on+0x463/0x620 [ 1655.756962][ T2761] do_syscall_64+0xf6/0x7d0 [ 1655.761509][ T2761] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1655.767410][ T2761] RIP: 0033:0x45c829 [ 1655.771320][ T2761] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1655.791278][ T2761] RSP: 002b:00007fe2c2713c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1655.799698][ T2761] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1655.807678][ T2761] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 17:41:13 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0), 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1655.815689][ T2761] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1655.823668][ T2761] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1655.831649][ T2761] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fe2c27146d4 17:41:13 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = dup2(r0, r2) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="5c04000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000800010074626600300402000a0001000000000000000000000000000000000000000000000000000000000000000000000000000404030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea00"/1092], 0x45c}}, 0x0) r6 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={r8}, 0xc) fchown(r6, r9, r11) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0xbcd, 0x4e24, 0x2, 0xcccbafd4c28a4758, 0x20, 0x80, 0x1d, r5, r9}, {0x8, 0xffffffffffffffff, 0x6, 0xff, 0xfffffffffffffffe, 0x3, 0x20, 0x10001}, {0x40, 0x6, 0x1f, 0x3}, 0x0, 0x6e6bb2, 0x0, 0x0, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x22}, 0x4d5, 0xff}, 0xa, @in=@loopback, 0x3506, 0x4, 0x3, 0x7, 0x200, 0x7, 0x80000000}}, 0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @broadcast}, 0x10) 17:41:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5b060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1656.029209][ T2769] syz-executor.4 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1656.112489][ T2769] CPU: 0 PID: 2769 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1656.121125][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1656.131277][ T2769] Call Trace: [ 1656.134588][ T2769] dump_stack+0x188/0x20d [ 1656.138941][ T2769] dump_header+0x10b/0x826 [ 1656.143378][ T2769] oom_kill_process.cold+0x10/0x15 [ 1656.148510][ T2769] out_of_memory+0x31f/0x12f0 [ 1656.153302][ T2769] ? oom_killer_disable+0x270/0x270 [ 1656.158530][ T2769] ? mutex_trylock+0x246/0x2c0 [ 1656.163922][ T2769] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1656.171074][ T2769] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1656.177803][ T2769] ? warn_alloc+0x110/0x110 [ 1656.182438][ T2769] __alloc_pages_nodemask+0x5d9/0x810 [ 1656.188025][ T2769] ? mutex_trylock+0x2c0/0x2c0 [ 1656.192815][ T2769] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1656.199598][ T2769] ? preempt_schedule_irq+0xee/0x150 [ 1656.205163][ T2769] ? wait_for_completion+0x270/0x270 [ 1656.210780][ T2769] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1656.217217][ T2769] alloc_pages_current+0xff/0x200 [ 1656.222803][ T2769] ion_page_pool_alloc+0x186/0x280 [ 1656.227939][ T2769] ion_system_heap_allocate+0x321/0xb00 [ 1656.233550][ T2769] ? ion_system_heap_free+0x240/0x240 [ 1656.238972][ T2769] ? kfree+0x1eb/0x2b0 [ 1656.243060][ T2769] ? ion_ioctl+0x9da/0xca0 [ 1656.247489][ T2769] ? lockdep_hardirqs_on+0x463/0x620 [ 1656.252823][ T2769] ion_ioctl+0x37a/0xca0 [ 1656.257094][ T2769] ? _ion_buffer_destroy+0xa0/0xa0 [ 1656.262243][ T2769] ? ksys_dup3+0x3c0/0x3c0 [ 1656.266680][ T2769] ? __x64_sys_futex+0x380/0x4f0 [ 1656.271640][ T2769] ? _ion_buffer_destroy+0xa0/0xa0 [ 1656.276771][ T2769] ksys_ioctl+0x11a/0x180 [ 1656.281233][ T2769] __x64_sys_ioctl+0x6f/0xb0 [ 1656.285846][ T2769] ? lockdep_hardirqs_on+0x463/0x620 [ 1656.291153][ T2769] do_syscall_64+0xf6/0x7d0 [ 1656.295686][ T2769] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1656.301593][ T2769] RIP: 0033:0x45c829 [ 1656.305499][ T2769] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1656.325107][ T2769] RSP: 002b:00007fea8eeedc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1656.333532][ T2769] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1656.341634][ T2769] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1656.349724][ T2769] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1656.357716][ T2769] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1656.365708][ T2769] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8eeee6d4 17:41:14 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1656.787524][ T2769] Mem-Info: [ 1656.791978][ T2769] active_anon:224342 inactive_anon:6176 isolated_anon:0 [ 1656.791978][ T2769] active_file:3031 inactive_file:15816 isolated_file:0 [ 1656.791978][ T2769] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1656.791978][ T2769] slab_reclaimable:18963 slab_unreclaimable:155142 [ 1656.791978][ T2769] mapped:58711 shmem:6419 pagetables:4592 bounce:0 [ 1656.791978][ T2769] free:162859 free_pcp:199 free_cma:0 [ 1656.835916][ T2769] Node 0 active_anon:854144kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216396kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 294912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1656.883827][ T2761] Mem-Info: [ 1656.906612][ T2761] active_anon:224367 inactive_anon:6176 isolated_anon:0 [ 1656.906612][ T2761] active_file:3031 inactive_file:15891 isolated_file:0 [ 1656.906612][ T2761] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1656.906612][ T2761] slab_reclaimable:18963 slab_unreclaimable:155272 [ 1656.906612][ T2761] mapped:58811 shmem:6419 pagetables:4592 bounce:0 [ 1656.906612][ T2761] free:155417 free_pcp:222 free_cma:0 17:41:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5c000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1657.108647][ T2761] Node 0 active_anon:854144kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216396kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 294912kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1657.138921][ T2769] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1992kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:4kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.284750][ T2761] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1992kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:4kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.319625][ T2769] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1657.349679][ T2769] Node 0 DMA32 free:35872kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:852152kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11472kB pagetables:14304kB bounce:0kB free_pcp:880kB local_pcp:632kB free_cma:0kB [ 1657.466675][ T2761] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1657.500397][ T2761] Node 0 DMA32 free:35560kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:852152kB inactive_anon:16460kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11472kB pagetables:14304kB bounce:0kB free_pcp:908kB local_pcp:632kB free_cma:0kB [ 1657.557633][ T2769] lowmem_reserve[]: 0 0 0 0 0 [ 1657.581615][ T2769] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.742495][ T2761] lowmem_reserve[]: 0 0 0 0 0 [ 1657.749604][ T2769] lowmem_reserve[]: 0 0 0 0 0 [ 1657.777795][ T2761] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1657.808404][ T2769] Node 0 DMA: 10*4kB (E) 69*8kB (UME) 47*16kB (UME) 29*32kB (UE) 1*64kB (U) 10*128kB (U) 2*256kB (U) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10272kB [ 1657.916459][ T2769] Node 0 DMA32: 176*4kB (UME) 199*8kB (UME) 79*16kB (UME) 999*32kB (UE) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35784kB [ 1657.968732][ T2761] lowmem_reserve[]: 0 0 0 0 0 [ 1658.013002][ T2769] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1658.018380][ T2761] Node 0 DMA: 13*4kB (UE) 70*8kB (UME) 47*16kB (UME) 29*32kB (UE) 1*64kB (U) 10*128kB (U) 2*256kB (U) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10292kB [ 1658.083426][ T2769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.141642][ T2769] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.146449][ T2761] Node 0 DMA32: 176*4kB (UME) 223*8kB (UME) 72*16kB (UME) 999*32kB (UE) 4*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35864kB [ 1658.202032][ T2769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:41:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5c060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1658.255281][ T2761] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1658.286737][ T2769] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.338649][ T2761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.349988][ T2769] 13622 total pagecache pages [ 1658.375445][ T2769] 0 pages in swap cache [ 1658.394653][ T2761] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.408982][ T2769] Swap cache stats: add 0, delete 0, find 0/0 [ 1658.441106][ T2769] Free swap = 0kB [ 1658.446935][ T2761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1658.483234][ T2769] Total swap = 0kB [ 1658.498846][ T2761] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1658.516061][ T2769] 1965979 pages RAM [ 1658.541395][ T2769] 0 pages HighMem/MovableOnly [ 1658.555020][ T2761] 13625 total pagecache pages [ 1658.584960][ T2769] 349380 pages reserved [ 1658.593996][ T2761] 0 pages in swap cache [ 1658.612434][ T2769] 0 pages cma reserved [ 1658.619900][ T2761] Swap cache stats: add 0, delete 0, find 0/0 [ 1658.640038][ T2769] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=4201,uid=0 [ 1658.651365][ T2761] Free swap = 0kB [ 1658.681382][ T2761] Total swap = 0kB [ 1658.700718][ T2761] 1965979 pages RAM [ 1658.745940][ T2761] 0 pages HighMem/MovableOnly [ 1658.768033][ T2761] 349380 pages reserved [ 1658.783058][ T2769] Out of memory: Killed process 4201 (syz-executor.4) total-vm:75236kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1658.825004][ T2761] 0 pages cma reserved [ 1658.857714][ T1143] oom_reaper: reaped process 4201 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1659.105114][ T1143] oom_reaper: reaped process 2764 (syz-executor.0), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB [ 1659.248227][ T1143] oom_reaper: reaped process 2769 (syz-executor.4), now anon-rss:0kB, file-rss:34836kB, shmem-rss:0kB [ 1659.307642][ T1143] oom_reaper: reaped process 2774 (syz-executor.2), now anon-rss:0kB, file-rss:34784kB, shmem-rss:0kB 17:41:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5d060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:18 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:18 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:18 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="66b9cc08000066b8fbffffff66baff7f00000f30baf80c66b88c99658366efbafc0cec66b8008000000f23c80f21f866350000f0000f23f865f2f7e4f38693cd003e0f7926e23dbaf80c66b8b455198a66efbafc0c66b8c600000066ef0f01c9c4e235dd5b00f30fc7772e", 0x6b}], 0x1, 0x68, &(0x7f0000000180)=[@dstype0={0x6, 0x8}], 0x1) 17:41:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5e060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:20 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) chmod(&(0x7f0000000040)='./file0\x00', 0x382) 17:41:20 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101100, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000080)) 17:41:20 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 2: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) futex(&(0x7f0000000040), 0x8b, 0x2, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000140)=0x1, 0x1) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffd6, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x80, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x80000001, 0xffffffffffffffdb, 0x0, r0, 0x3000000}) [ 1663.277123][ T2868] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 17:41:21 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x5, 0x4) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000100)="5b99c9ffdfa62b4b424e535db835dca8327b8f7a2b6dc10d3a1bc47a8a56c9cb8babd07c3609b9c958287c5d305df5f734acc07686900047251ce9dff998604a0d558bf17268d6f6e367a3398af6baa80c67c624cac8e30b72f4e484f836c55154d2e80e1b9598ad8c795139cc6f8634f094fc6bc4942a7c9e0cead497e856aaab9b9d00b814909cbe68547c66ee4b0c90c342e47f2d105e3eb6d7178dd0f3346b0e4070a414f951c2aaef203a22840d83a836d2a3cae2abdf2e495167dfbe8931967fe8745c064dea80e5d8850d62e767649c5f8093d2a4b98dc5a35ebc0c4585cb269533bb3c777b09f4", 0xeb) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1663.363662][ T2868] CPU: 1 PID: 2868 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1663.372278][ T2868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1663.382541][ T2868] Call Trace: [ 1663.385853][ T2868] dump_stack+0x188/0x20d [ 1663.390205][ T2868] dump_header+0x10b/0x826 [ 1663.394739][ T2868] oom_kill_process.cold+0x10/0x15 [ 1663.399871][ T2868] out_of_memory+0x31f/0x12f0 [ 1663.404843][ T2868] ? oom_killer_disable+0x270/0x270 [ 1663.410060][ T2868] ? mutex_trylock+0x246/0x2c0 [ 1663.414837][ T2868] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1663.421535][ T2868] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1663.428192][ T2868] ? warn_alloc+0x110/0x110 [ 1663.433865][ T2868] __alloc_pages_nodemask+0x5d9/0x810 [ 1663.439265][ T2868] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1663.446051][ T2868] ? mark_lock+0x12b/0xf10 [ 1663.450487][ T2868] ? find_held_lock+0x2d/0x110 [ 1663.455276][ T2868] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1663.461714][ T2868] alloc_pages_current+0xff/0x200 [ 1663.466756][ T2868] ? memtype_check_insert.cold+0x1fc/0x1fc [ 1663.472586][ T2868] __get_free_pages+0x8/0x40 [ 1663.477192][ T2868] kasan_populate_vmalloc_pte+0x28/0x1a0 [ 1663.482846][ T2868] __apply_to_page_range+0x6ac/0xac0 [ 1663.488146][ T2868] ? memset+0x40/0x40 [ 1663.492188][ T2868] alloc_vmap_area+0xae8/0x1e20 [ 1663.497098][ T2868] ? purge_vmap_area_lazy+0x40/0x40 [ 1663.502703][ T2868] __get_vm_area_node+0x178/0x3b0 [ 1663.512280][ T2868] __vmalloc_node_range+0xdc/0x7a0 [ 1663.517491][ T2868] ? n_tty_open+0x16/0x170 [ 1663.522023][ T2868] ? __wake_up_common_lock+0xde/0x130 [ 1663.527437][ T2868] ? n_tty_open+0x16/0x170 [ 1663.531878][ T2868] vzalloc+0x67/0x80 [ 1663.535798][ T2868] ? n_tty_open+0x16/0x170 [ 1663.540235][ T2868] n_tty_open+0x16/0x170 [ 1663.544510][ T2868] ? n_tty_set_termios+0x1010/0x1010 [ 1663.549814][ T2868] tty_ldisc_open.isra.0+0x9b/0x110 [ 1663.555061][ T2868] tty_ldisc_setup+0x43/0x100 [ 1663.559756][ T2868] tty_init_dev+0x20c/0x460 [ 1663.564283][ T2868] tty_open+0x48b/0xb40 [ 1663.568468][ T2868] ? kobject_init+0x1a0/0x1a0 [ 1663.573159][ T2868] ? do_raw_spin_lock+0x129/0x2e0 [ 1663.578202][ T2868] ? tty_init_dev+0x460/0x460 [ 1663.582892][ T2868] ? rwlock_bug.part.0+0x90/0x90 [ 1663.587856][ T2868] ? tty_init_dev+0x460/0x460 [ 1663.592668][ T2868] chrdev_open+0x219/0x5c0 [ 1663.597111][ T2868] ? cdev_put.part.0+0x50/0x50 [ 1663.602018][ T2868] ? security_file_open+0x84/0x410 [ 1663.607181][ T2868] do_dentry_open+0x4ba/0x1290 [ 1663.612002][ T2868] ? cdev_put.part.0+0x50/0x50 [ 1663.616794][ T2868] ? security_inode_permission+0xc4/0xf0 [ 1663.622484][ T2868] ? chown_common+0x550/0x550 [ 1663.627184][ T2868] ? inode_permission+0xab/0x500 [ 1663.632149][ T2868] path_openat+0x1e59/0x27d0 [ 1663.636775][ T2868] ? path_lookupat.isra.0+0x530/0x530 [ 1663.642185][ T2868] do_filp_open+0x192/0x260 [ 1663.646706][ T2868] ? may_open_dev+0xf0/0xf0 [ 1663.651262][ T2868] ? _raw_spin_unlock+0x24/0x40 [ 1663.656126][ T2868] ? __alloc_fd+0x46d/0x600 [ 1663.660653][ T2868] do_sys_openat2+0x585/0x7d0 [ 1663.665524][ T2868] ? file_open_root+0x400/0x400 [ 1663.670394][ T2868] ? _copy_to_user+0x126/0x160 [ 1663.676786][ T2868] ? put_timespec64+0xcb/0x120 [ 1663.681583][ T2868] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1663.687322][ T2868] do_sys_open+0xc3/0x140 [ 1663.691680][ T2868] ? filp_open+0x70/0x70 [ 1663.695938][ T2868] ? __ia32_sys_clock_settime+0x260/0x260 [ 1663.701666][ T2868] ? trace_hardirqs_off_caller+0x55/0x230 [ 1663.707408][ T2868] do_syscall_64+0xf6/0x7d0 [ 1663.711932][ T2868] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1663.717839][ T2868] RIP: 0033:0x416621 [ 1663.721743][ T2868] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1663.741353][ T2868] RSP: 002b:00007f48219267a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1663.749798][ T2868] RAX: ffffffffffffffda RBX: 0000000000509000 RCX: 0000000000416621 [ 1663.757782][ T2868] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007f48219267d0 [ 1663.765845][ T2868] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000e [ 1663.773823][ T2868] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 1663.781809][ T2868] R13: 0000000000000c13 R14: 00000000004ce3f3 R15: 00007f48219276d4 17:41:21 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x204400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x5, 0x0, 0x3011, 0x6, 0x7, {0x9, 0x10001}, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$addseals(r3, 0x409, 0x8) 17:41:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x5f060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1666.181850][ T2868] Mem-Info: [ 1666.196198][ T2868] active_anon:228990 inactive_anon:6176 isolated_anon:0 [ 1666.196198][ T2868] active_file:3034 inactive_file:16023 isolated_file:0 [ 1666.196198][ T2868] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1666.196198][ T2868] slab_reclaimable:18792 slab_unreclaimable:156459 [ 1666.196198][ T2868] mapped:58919 shmem:6419 pagetables:4566 bounce:0 [ 1666.196198][ T2868] free:82567 free_pcp:400 free_cma:0 17:41:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1666.411096][ T2868] Node 0 active_anon:851876kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216408kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 292864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1666.560843][ T2868] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1980kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1666.707616][ T2868] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1666.731391][ T2868] Node 0 DMA32 free:35536kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:849896kB inactive_anon:16460kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11408kB pagetables:14200kB bounce:0kB free_pcp:1380kB local_pcp:608kB free_cma:0kB [ 1666.866948][ T2868] lowmem_reserve[]: 0 0 0 0 0 [ 1666.879204][ T2868] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1667.035796][ T2868] lowmem_reserve[]: 0 0 0 0 0 [ 1667.057940][ T2868] Node 0 DMA: 11*4kB (ME) 51*8kB (UME) 48*16kB (UME) 29*32kB (UE) 3*64kB (U) 10*128kB (U) 2*256kB (U) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10276kB [ 1667.121895][ T2868] Node 0 DMA32: 224*4kB (ME) 276*8kB (UME) 95*16kB (UME) 892*32kB (UE) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 35664kB 17:41:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x61060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1667.193615][ T2868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1667.246565][ T2868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.287894][ T2868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.327978][ T2868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1667.371354][ T2868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1667.420457][ T2868] 13636 total pagecache pages [ 1667.447625][ T2868] 0 pages in swap cache [ 1667.469993][ T2868] Swap cache stats: add 0, delete 0, find 0/0 [ 1667.500833][ T2868] Free swap = 0kB [ 1667.518497][ T2868] Total swap = 0kB [ 1667.536395][ T2868] 1965979 pages RAM [ 1667.556305][ T2868] 0 pages HighMem/MovableOnly [ 1667.577121][ T2868] 349380 pages reserved [ 1667.595131][ T2868] 0 pages cma reserved [ 1667.616853][ T2868] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=11561,uid=0 [ 1667.689905][ T2868] Out of memory: Killed process 11561 (syz-executor.5) total-vm:75104kB, anon-rss:2228kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1667.798693][ T1143] oom_reaper: reaped process 2891 (syz-executor.0), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB [ 1667.864957][ T1143] oom_reaper: reaped process 2868 (syz-executor.3), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1667.949303][ T1143] oom_reaper: reaped process 2899 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB [ 1668.019182][ T1143] oom_reaper: reaped process 2901 (syz-executor.2), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 17:41:25 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x62010000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1668.813562][ T7614] syz-executor.5 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=0 [ 1668.892321][ T7614] CPU: 0 PID: 7614 Comm: syz-executor.5 Not tainted 5.7.0-rc4-syzkaller #0 [ 1668.900933][ T7614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1668.910996][ T7614] Call Trace: [ 1668.914282][ T7614] dump_stack+0x188/0x20d [ 1668.918697][ T7614] dump_header+0x10b/0x826 [ 1668.923100][ T7614] oom_kill_process.cold+0x10/0x15 [ 1668.928201][ T7614] out_of_memory+0x31f/0x12f0 [ 1668.932869][ T7614] ? oom_killer_disable+0x270/0x270 [ 1668.938054][ T7614] ? mutex_trylock+0x246/0x2c0 [ 1668.942899][ T7614] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1668.949590][ T7614] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1668.956449][ T7614] ? warn_alloc+0x110/0x110 [ 1668.960972][ T7614] __alloc_pages_nodemask+0x5d9/0x810 [ 1668.966334][ T7614] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1668.973085][ T7614] ? lock_acquire+0x1f2/0x8f0 [ 1668.977760][ T7614] ? mmu_notifier_invalidate_range_start+0x8e/0x100 [ 1668.984334][ T7614] alloc_pages_current+0xff/0x200 [ 1668.989357][ T7614] pte_alloc_one+0x16/0x190 [ 1668.993844][ T7614] __pte_alloc+0x1b/0x310 [ 1668.998158][ T7614] copy_page_range+0x14fc/0x1f00 [ 1669.003619][ T7614] ? handle_mm_fault+0x660/0x660 [ 1669.008551][ T7614] ? validate_mm_rb+0x3e/0xb0 [ 1669.013216][ T7614] ? __vma_link_rb+0x577/0x740 [ 1669.018073][ T7614] dup_mm+0x9a4/0x1300 [ 1669.022137][ T7614] ? vm_area_dup+0x1d0/0x1d0 [ 1669.026726][ T7614] ? lockdep_init_map_waits+0x26a/0x890 [ 1669.032261][ T7614] copy_process+0x29cc/0x7110 [ 1669.036957][ T7614] ? __cleanup_sighand+0xb0/0xb0 [ 1669.041884][ T7614] ? find_held_lock+0x2d/0x110 [ 1669.046719][ T7614] _do_fork+0x12d/0x1010 [ 1669.050949][ T7614] ? lock_downgrade+0x840/0x840 [ 1669.055787][ T7614] ? copy_init_mm+0x20/0x20 [ 1669.060284][ T7614] ? __might_fault+0x190/0x1d0 [ 1669.065049][ T7614] __do_sys_clone+0xec/0x140 [ 1669.069644][ T7614] ? __do_sys_clone3+0x320/0x320 [ 1669.074662][ T7614] ? __ia32_sys_clock_settime+0x260/0x260 [ 1669.080386][ T7614] ? trace_hardirqs_off_caller+0x55/0x230 [ 1669.086115][ T7614] do_syscall_64+0xf6/0x7d0 [ 1669.091749][ T7614] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1669.097623][ T7614] RIP: 0033:0x45ae5a [ 1669.101504][ T7614] Code: f7 d8 64 89 04 25 d4 02 00 00 64 4c 8b 0c 25 10 00 00 00 31 d2 4d 8d 91 d0 02 00 00 31 f6 bf 11 00 20 01 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 f5 00 00 00 85 c0 41 89 c5 0f 85 fc 00 00 [ 1669.121103][ T7614] RSP: 002b:0000000000c9fd60 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1669.129510][ T7614] RAX: ffffffffffffffda RBX: 0000000000c9fd60 RCX: 000000000045ae5a [ 1669.137496][ T7614] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1669.145456][ T7614] RBP: 0000000000c9fda0 R08: 0000000000000001 R09: 0000000001ef1940 [ 1669.153497][ T7614] R10: 0000000001ef1c10 R11: 0000000000000246 R12: 0000000000000001 [ 1669.161558][ T7614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000c9fdf0 [ 1669.324995][ T7614] Mem-Info: [ 1669.328173][ T7614] active_anon:229282 inactive_anon:6176 isolated_anon:0 [ 1669.328173][ T7614] active_file:17 inactive_file:43 isolated_file:0 [ 1669.328173][ T7614] unevictable:0 dirty:9 writeback:5 unstable:0 [ 1669.328173][ T7614] slab_reclaimable:18763 slab_unreclaimable:156387 [ 1669.328173][ T7614] mapped:54502 shmem:6419 pagetables:4515 bounce:0 [ 1669.328173][ T7614] free:24769 free_pcp:95 free_cma:0 [ 1669.393644][ T7614] Node 0 active_anon:849688kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216408kB dirty:0kB writeback:8kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 290816kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1669.490884][ T7614] Node 1 active_anon:67440kB inactive_anon:8244kB active_file:444kB inactive_file:256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2300kB dirty:36kB writeback:12kB shmem:8260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1669.622224][ T7614] Node 0 DMA free:10176kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1980kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1669.728154][ T7614] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1669.763396][ T7614] Node 0 DMA32 free:17940kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:847708kB inactive_anon:16460kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11376kB pagetables:14096kB bounce:0kB free_pcp:584kB local_pcp:320kB free_cma:0kB [ 1669.835265][ T7614] lowmem_reserve[]: 0 0 0 0 0 [ 1669.852919][ T7614] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1669.917700][ T7614] lowmem_reserve[]: 0 0 0 0 0 [ 1669.934416][ T7614] Node 1 Normal free:65572kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:67516kB inactive_anon:8244kB active_file:696kB inactive_file:124kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:1680kB pagetables:3756kB bounce:0kB free_pcp:1672kB local_pcp:1372kB free_cma:0kB [ 1670.028098][ T7614] lowmem_reserve[]: 0 0 0 0 0 [ 1670.061280][ T7614] Node 0 DMA: 13*4kB (UME) 38*8kB (UME) 48*16kB (UME) 29*32kB (UE) 3*64kB (U) 10*128kB (U) 2*256kB (U) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10180kB [ 1670.101150][ T7614] Node 0 DMA32: 387*4kB (UME) 234*8kB (UME) 81*16kB (UME) 271*32kB (UE) 7*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 2*2048kB (M) 0*4096kB = 17932kB [ 1670.132610][ T7614] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1670.163518][ T7614] Node 1 Normal: 849*4kB (UME) 713*8kB (UME) 476*16kB (M) 311*32kB (ME) 176*64kB (UM) 36*128kB (M) 0*256kB 0*512kB 0*1024kB 4*2048kB (U) 1*4096kB (U) = 54828kB [ 1670.205539][ T7614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1670.232181][ T7614] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1670.241842][ T7614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1670.339533][ T7614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1670.369423][ T7614] 6784 total pagecache pages [ 1670.379639][ T7614] 0 pages in swap cache [ 1670.393194][ T7614] Swap cache stats: add 0, delete 0, find 0/0 [ 1670.399284][ T7614] Free swap = 0kB [ 1670.406551][ T7614] Total swap = 0kB [ 1670.410672][ T7614] 1965979 pages RAM [ 1670.432374][ T7614] 0 pages HighMem/MovableOnly [ 1670.437098][ T7614] 349380 pages reserved [ 1670.450217][ T7614] 0 pages cma reserved [ 1670.465013][ T7614] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=8419,uid=0 [ 1670.489118][ T7614] Out of memory: Killed process 8419 (syz-executor.0) total-vm:75236kB, anon-rss:2232kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1670.663901][ T2933] syz-executor.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1670.726228][ T2933] CPU: 0 PID: 2933 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1670.734849][ T2933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1670.744909][ T2933] Call Trace: [ 1670.748220][ T2933] dump_stack+0x188/0x20d [ 1670.752579][ T2933] dump_header+0x10b/0x826 [ 1670.757006][ T2933] oom_kill_process.cold+0x10/0x15 [ 1670.762130][ T2933] out_of_memory+0x31f/0x12f0 [ 1670.766838][ T2933] ? oom_killer_disable+0x270/0x270 [ 1670.772064][ T2933] ? mutex_trylock+0x246/0x2c0 [ 1670.776831][ T2933] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1670.783598][ T2933] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1670.790231][ T2933] ? warn_alloc+0x110/0x110 [ 1670.794780][ T2933] __alloc_pages_nodemask+0x5d9/0x810 [ 1670.800170][ T2933] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1670.806947][ T2933] ? xas_load+0x66/0x140 [ 1670.811292][ T2933] ? find_get_entry+0x426/0x730 [ 1670.816174][ T2933] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1670.823020][ T2933] alloc_pages_current+0xff/0x200 [ 1670.828073][ T2933] __page_cache_alloc+0x298/0x480 [ 1670.833124][ T2933] pagecache_get_page+0x27f/0xa10 [ 1670.838180][ T2933] filemap_fault+0xfca/0x2ed0 [ 1670.842886][ T2933] ? lock_downgrade+0x840/0x840 [ 1670.847764][ T2933] ? read_cache_page_gfp+0x30/0x30 [ 1670.852993][ T2933] ? down_read+0x110/0x420 [ 1670.857430][ T2933] ? down_read_killable+0x460/0x460 [ 1670.863693][ T2933] ? filemap_page_mkwrite+0x300/0x300 [ 1670.870034][ T2933] ext4_filemap_fault+0x87/0xb6 [ 1670.874909][ T2933] __do_fault+0x10d/0x520 [ 1670.879273][ T2933] __handle_mm_fault+0x28a7/0x3c90 [ 1670.884404][ T2933] ? vm_insert_pages+0x6a0/0x6a0 [ 1670.889478][ T2933] ? count_memcg_event_mm+0x1e2/0x3d0 [ 1670.894884][ T2933] ? mark_held_locks+0x9f/0xe0 [ 1670.899674][ T2933] handle_mm_fault+0x1a5/0x660 [ 1670.904459][ T2933] do_page_fault+0x55b/0x13da [ 1670.909165][ T2933] page_fault+0x39/0x40 [ 1670.913328][ T2933] RIP: 0033:0x4749b0 [ 1670.917239][ T2933] Code: Bad RIP value. [ 1670.921327][ T2933] RSP: 002b:00007f4821926598 EFLAGS: 00010202 [ 1670.927427][ T2933] RAX: 00000000fbad8001 RBX: 0000000000000080 RCX: 0000000000000000 [ 1670.935410][ T2933] RDX: 00007f48219266c8 RSI: 00000000004c18c4 RDI: 00007f48219265a0 [ 1670.943500][ T2933] RBP: 00007f48219267d0 R08: 0000000000000000 R09: 0000000000000004 [ 1670.951483][ T2933] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004c18c4 [ 1670.959466][ T2933] R13: 00007f48219266c8 R14: 0000000000000001 R15: 00007f48219276d4 [ 1671.866222][ T2933] Mem-Info: [ 1671.877961][ T2933] active_anon:228775 inactive_anon:6176 isolated_anon:0 [ 1671.877961][ T2933] active_file:9 inactive_file:762 isolated_file:0 [ 1671.877961][ T2933] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1671.877961][ T2933] slab_reclaimable:18768 slab_unreclaimable:155760 [ 1671.877961][ T2933] mapped:54855 shmem:6419 pagetables:4460 bounce:0 [ 1671.877961][ T2933] free:155716 free_pcp:394 free_cma:0 [ 1671.930570][ T2933] Node 0 active_anon:847492kB inactive_anon:16460kB active_file:8kB inactive_file:5468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219908kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 288768kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 17:41:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0xffff8001, 0x559}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1672.126722][ T2933] Node 0 DMA free:10328kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1980kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.343380][ T2933] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1672.379447][ T2933] Node 0 DMA32 free:43688kB min:42076kB low:51056kB high:60036kB reserved_highatomic:0KB active_anon:845512kB inactive_anon:16460kB active_file:8kB inactive_file:6568kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11340kB pagetables:13992kB bounce:0kB free_pcp:1772kB local_pcp:1452kB free_cma:0kB 17:41:30 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000429bd7000fedbdf250c00000004000b0009000700678edcd7030000000900090005ac0f0005000800000000000900070050bdbf41fa00000004040b0004002800"], 0x48}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:30 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440)='nl80211\x00') recvmmsg(r3, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') recvmmsg(r5, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000400)={0x14, r6, 0x709}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r6, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x20004010) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000771a1083d69832c19b1c59b1e45b40db4eb1f4430c92fc3bafa2f893d962f0356b6c11f3447c0fc2963d4287840824afd07d54c1d9cf99a9c5244aa55b08c1cb1dd07ec5b79e1af8eea3e138d6ec7f22bc9b37abb1a607eece57ae6ab5c9c9070d9111834a9f66c192d5cd9c2b89d8919b83a3308c0f42502e0eff0131c120e60988f4108fc6c06e000000", @ANYRES16=r4, @ANYBLOB="000004cb78690be2de474ce45701ea2be5418a7bd5b2b2c292064863918ae898b2d8a34604e1843a04b699"], 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002300)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="100029bd7000fbdbdf25130000000600120060277f8675582c067e462f8188d838982fe74abcbec57409ea92e6b09b10a5f88ff69d3e489c3e93e756126320c305e9954f2d62fb0ff94767cf495ba6a6bc1318e47e11d0a9e7458d8239bf8fd695242b72a64f7e6729832075d899b2135dc7782dff8841f78e4606a844671bebe5042a92a6de5e68060112b6a2b63cc73bac9b5bf496ec697f3a4dd02bc619d06e6a866af87fd01f237aa3cab3bd1e78e15710ca18c5aa574bf1853087f74bbb633dc910db"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10010005, 0xffffffffffffffff, 0x0, r2, 0x3000000}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDCTL_DSP_RESET(r8, 0x5000, 0x0) [ 1672.584863][ T2933] lowmem_reserve[]: 0 0 0 0 0 [ 1672.608444][ T2933] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1672.741719][ T2933] lowmem_reserve[]: 0 0 0 0 0 [ 1672.754970][ T2933] Node 0 DMA: 10*4kB (E) 50*8kB (UME) 48*16kB (UME) 29*32kB (UE) 3*64kB (U) 10*128kB (U) 2*256kB (U) 2*512kB (UE) 1*1024kB (E) 2*2048kB (UM) 0*4096kB = 10264kB 17:41:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x62060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1672.832191][ T2933] Node 0 DMA32: 783*4kB (UE) 837*8kB (UE) 249*16kB (UME) 891*32kB (UME) 11*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 43028kB 17:41:30 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1, 'gred\x00'}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x3c}}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r1, 0xc0044dff, &(0x7f0000000040)=0xfff) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x100, 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000700)=@gcm_256={{0x304}, "0ab6cb44111fff4a", "86c389665d2467fb978a122b98118c6db273e0459873c3258066d0663e66e102", "4ccc882a", "f970a3493d264ac7"}, 0x38) [ 1672.919150][ T2933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1672.957258][ T2933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.003774][ T2933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.038658][ T2933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1673.078735][ T2933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1673.121753][ T2933] 11831 total pagecache pages [ 1673.140659][ T2933] 0 pages in swap cache [ 1673.159059][ T2933] Swap cache stats: add 0, delete 0, find 0/0 [ 1673.186744][ T2933] Free swap = 0kB [ 1673.199927][ T2933] Total swap = 0kB [ 1673.215792][ T2933] 1965979 pages RAM [ 1673.232110][ T2933] 0 pages HighMem/MovableOnly [ 1673.249779][ T2933] 349380 pages reserved [ 1673.266586][ T2933] 0 pages cma reserved [ 1673.283836][ T2933] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=3702,uid=0 [ 1673.355102][ T2933] Out of memory: Killed process 3702 (syz-executor.1) total-vm:74972kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 17:41:31 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfffffffffffffff9, 0x4a000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x21, 0xffffffffffffffe2, 0x0, r1, 0x3000000}) 17:41:35 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, r3, 0x1, 0x0, 0x0, {0x18}}, 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x6c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000854}, 0x4008058) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x63060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:35 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = shmget(0xffffffffffffffff, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffc, 0x3, 0x8000, 0x0, 0x0, 0x81}) shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000100)=""/223) r2 = socket$inet6(0xa, 0x2, 0x0) dup(r2) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvfrom(r2, &(0x7f0000000040)=""/38, 0x26, 0x40000000, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x4, 0x2, 0x1}}, 0x80) 17:41:35 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_int(r1, &(0x7f0000000280)=0x80000000, 0x12) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="00662629e70cb7af3bd42f6915596be479fb43dc24122bca3362a15836d85571befefc4ade032b4c22fe5f938e61962b45604691ab1f733292d6e3ef2b5df35137b2c9ad580821fa44b23904dac1ba8ee206f24744eaa405915bbd252aa10955e024ffddeaabd857a4a0b1d37e59934b5280a57cf959897699f11bf74182080fb0691e8b8942f9f24f301d467acc30918c7763fe8a7d422ef4f1377acc41301e9911ce4d59cb", 0xa6, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)="a1853eff3129ce2832a81564f94820de4358bbedab16c3f7042431796f5060ecbb6c6a7833537cd1bd36e41b1f594c46645654eb84db324f1d60a9820a25b122a2bd7a808bff280d085aa0f78160d17f7631639c11994224498e4017b7267de32e757638b522bc1d4327349e72d5f126762621bbc36a0bb578e5ef98369988b9432c4f57db", 0x85, r2}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1677.768121][ T2991] tipc: All keys are flushed! 17:41:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x1, r2, 0x3000000}) 17:41:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x64060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:35 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x1, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:35 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:36 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1678.544314][ T3021] warn_alloc: 8 callbacks suppressed [ 1678.544336][ T3021] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1678.663588][ T3021] CPU: 1 PID: 3021 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1678.672310][ T3021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1678.682376][ T3021] Call Trace: [ 1678.685683][ T3021] dump_stack+0x188/0x20d [ 1678.690030][ T3021] warn_alloc.cold+0x87/0x164 [ 1678.694817][ T3021] ? zone_watermark_ok_safe+0x260/0x260 [ 1678.700920][ T3021] ? ___might_sleep+0x15a/0x2b0 [ 1678.705799][ T3021] ? __alloc_pages_direct_compact+0x366/0x420 [ 1678.711887][ T3021] ? get_page_from_freelist+0x3580/0x3580 [ 1678.717616][ T3021] ? __isolate_free_page+0x610/0x610 [ 1678.722902][ T3021] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1678.729508][ T3021] ? get_page_from_freelist+0x1767/0x3580 [ 1678.735247][ T3021] ? warn_alloc+0x110/0x110 [ 1678.739770][ T3021] ? __isolate_free_page+0x610/0x610 [ 1678.745046][ T3021] __alloc_pages_nodemask+0x5d9/0x810 [ 1678.750430][ T3021] ? mutex_trylock+0x2c0/0x2c0 [ 1678.755208][ T3021] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1678.761983][ T3021] ? ion_page_pool_remove+0x10e/0x3a0 [ 1678.767381][ T3021] ? wait_for_completion+0x270/0x270 [ 1678.772653][ T3021] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1678.779073][ T3021] alloc_pages_current+0xff/0x200 [ 1678.784103][ T3021] ion_page_pool_alloc+0x186/0x280 [ 1678.789217][ T3021] ion_system_heap_allocate+0x321/0xb00 [ 1678.794758][ T3021] ? ion_system_heap_free+0x240/0x240 [ 1678.800116][ T3021] ? kfree+0x1eb/0x2b0 [ 1678.806776][ T3021] ? ion_ioctl+0x9da/0xca0 [ 1678.811180][ T3021] ? lockdep_hardirqs_on+0x463/0x620 [ 1678.816463][ T3021] ion_ioctl+0x37a/0xca0 [ 1678.820717][ T3021] ? _ion_buffer_destroy+0xa0/0xa0 [ 1678.825961][ T3021] ? ksys_dup3+0x3c0/0x3c0 [ 1678.830481][ T3021] ? __x64_sys_futex+0x380/0x4f0 [ 1678.835429][ T3021] ? _ion_buffer_destroy+0xa0/0xa0 [ 1678.840894][ T3021] ksys_ioctl+0x11a/0x180 [ 1678.846402][ T3021] __x64_sys_ioctl+0x6f/0xb0 [ 1678.850992][ T3021] ? lockdep_hardirqs_on+0x463/0x620 [ 1678.856322][ T3021] do_syscall_64+0xf6/0x7d0 [ 1678.860830][ T3021] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1678.866708][ T3021] RIP: 0033:0x45c829 [ 1678.870614][ T3021] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1678.890299][ T3021] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1678.898699][ T3021] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1678.906672][ T3021] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1678.914647][ T3021] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1678.922615][ T3021] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1678.930581][ T3021] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 [ 1679.614765][ T3021] Mem-Info: [ 1679.617988][ T3021] active_anon:230444 inactive_anon:6176 isolated_anon:0 [ 1679.617988][ T3021] active_file:607 inactive_file:3796 isolated_file:0 [ 1679.617988][ T3021] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1679.617988][ T3021] slab_reclaimable:18950 slab_unreclaimable:155506 [ 1679.617988][ T3021] mapped:57402 shmem:6419 pagetables:4408 bounce:0 [ 1679.617988][ T3021] free:69196 free_pcp:581 free_cma:0 [ 1679.669169][ T3021] Node 0 active_anon:845372kB inactive_anon:16460kB active_file:104kB inactive_file:824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216960kB dirty:32kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1679.710499][ T3021] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1679.816517][ T3021] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1679.836963][ T3021] Node 0 DMA32 free:46880kB min:35932kB low:44912kB high:53892kB reserved_highatomic:2048KB active_anon:843332kB inactive_anon:16460kB active_file:540kB inactive_file:852kB unevictable:0kB writepending:32kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11280kB pagetables:13884kB bounce:0kB free_pcp:1644kB local_pcp:376kB free_cma:0kB [ 1679.914048][ T3021] lowmem_reserve[]: 0 0 0 0 0 [ 1679.925733][ T3021] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1679.988360][ T3021] lowmem_reserve[]: 0 0 0 0 0 [ 1680.001990][ T3021] Node 0 DMA: 12*4kB (UME) 50*8kB (UME) 48*16kB (UME) 29*32kB (UME) 3*64kB (UM) 10*128kB (UM) 4*256kB (UM) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10272kB [ 1680.039374][ T3021] Node 0 DMA32: 180*4kB (UMEH) 1151*8kB (UMEH) 435*16kB (UMEH) 967*32kB (UMEH) 12*64kB (UM) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 48728kB [ 1680.073366][ T3021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1680.098795][ T3021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.119829][ T3021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.141143][ T3021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1680.167210][ T3021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1680.189186][ T3021] 11092 total pagecache pages [ 1680.200010][ T3021] 0 pages in swap cache [ 1680.210758][ T3021] Swap cache stats: add 0, delete 0, find 0/0 [ 1680.234702][ T3021] Free swap = 0kB [ 1680.243482][ T3021] Total swap = 0kB [ 1680.252278][ T3021] 1965979 pages RAM [ 1680.260877][ T3021] 0 pages HighMem/MovableOnly [ 1680.273838][ T3021] 349380 pages reserved [ 1680.286900][ T3021] 0 pages cma reserved 17:41:40 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='veth0_virt_wifi\x00'}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000140)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 17:41:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(0xffffffffffffffff, 0x0, r1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r2) ioctl$VIDIOC_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000180)={0x0, 0x49, 0x5, [], &(0x7f0000000140)=0x1}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:40 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x65060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x0, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:40 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x40000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)="4c28d105bfe3299bd0f8c13d2ca85ee317780011536c597af6909af9be5beb198dd7004ec9009352fa166c40386e84174e47"}, 0x20) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0xbd, 0x8000) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000440)='/proc/capi/capi20ncci\x00', 0x2001, 0x0) mq_timedreceive(r6, &(0x7f0000000480), 0x0, 0x200, &(0x7f00000004c0)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r7, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x408d1}, 0x8040) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4044040}, 0x20000001) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f00000001c0)={0x4, &(0x7f0000000180)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000340)={r8, 0x8, &(0x7f0000000200)=[0x100, 0x8, 0x3, 0x8, 0x1, 0x200, 0x5, 0x8], &(0x7f0000000240), 0x4, 0x8, 0xf12, &(0x7f0000000280)=[0x401, 0x7f, 0x4, 0x401, 0x6, 0x7, 0x0, 0x0], &(0x7f0000000300)=[0x1, 0x4, 0x7000000, 0x3d99, 0x3, 0x1, 0x6]}) accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0xaf1, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:40 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) dup(r3) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}]}}]}, 0x45c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan0\x00', r6}) sendmsg$can_j1939(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x2, {0x1, 0xff, 0x4}, 0xff}, 0x18, &(0x7f0000000240)={&(0x7f0000000140)="64900feba7c44e03fbb5cd648c423f68ada88bffadf6476ad0627845dbf98a49d813185b7ce45a0e4b8159cc1761e0e358c5b0993144388c96221c282fbb27247b45463ef511feff81f3ea0c1d7c675d94ba03595fa4fee87cef2b49a3f358b3478956a9ab2dfc11cfb7fc804648c01905ea1b19d608da0249cec846e6f7ae06c9ecbb597c733d3473c6f993da905786079916bd3bb7f4dbc892ae85beef3281d7e5e79e6ab23c26d5d4b5a2be4f7ed8c46f5b8ece5f859c0179333847c74215ec3c061c25f47515b9b41e8913b688c2c417dcdf2919dab3bd240a92e563aa3da8115ac8a0c1", 0xe6}, 0x1, 0x0, 0x0, 0x404e844}, 0x40000) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r2, 0x401, 0x100, r9}) 17:41:40 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) 17:41:40 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) 17:41:41 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) [ 1683.525688][ T3062] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 17:41:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, 0x0, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 1: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00b90000"], 0x4}, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) ptrace$getregset(0x4204, r0, 0x3, &(0x7f0000000140)={&(0x7f00000001c0)=""/116, 0x74}) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0xfffffffffffffd4e}], 0x10000000000000ad, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x120}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1683.712723][ T3063] sch_tbf: burst 0 is lower than device lo mtu (65550) ! 17:41:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x65580000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:41 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) lseek(r0, 0xfffffffffffffff8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x1, 0x9, 0x200}, {0xfff7, 0x0, 0x9, 0x80}, {0x5, 0x9, 0x8, 0x7fffffff}]}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000200)={0x9a0000, 0x3, 0x8, r1, 0x0, &(0x7f00000001c0)={0x98090c, 0x3ff, [], @p_u8=&(0x7f0000000140)=0x7f}}) r7 = open(&(0x7f0000000240)='./file0\x00', 0x2001, 0x21) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f0000000040)) lseek(r4, 0x1003, 0x1) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, 0x0, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r1) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r2) keyctl$unlink(0x9, r1, r2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f0000000040)) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000180)={0x0, 0x0, [0x0, 0x80000000, 0x800, 0xb, 0x1, 0x9, 0xfff, 0x1]}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r6}) 17:41:41 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:41 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:42 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:42 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:42 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, 0x0, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:44 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc002600a}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r4, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xf150}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x20000005) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x5, 0xffffffffffffffff, 0x0, r5, 0x3000000}) 17:41:44 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x105000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x4, 0xdaf83) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r3) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000000)={r5, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000002640)={r5, 0x1, 0x5f, 0x6, 0x1, 0x8000}, &(0x7f0000002680)=0x14) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f00000000c0)={0x0, {0xfff, 0x5}}) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) 17:41:44 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) 17:41:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x66060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:44 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000214020029bd7000fbdbdf250900020073797a31000000000900020073797afdffffff0040b5bdac122ba8926c1ea23f6ca982b35ddca3d849027ac06667940c34bb946f27191016fe0400b8588e6c98f4b3766467926e39951c3b12ce3e25771d4661c3b809bdc3ddb58d90db7a4bf3171e2cfca61e10170f1ec68a50f158b7fa466eca9b07349cb014e868695460fdd71403ca195108e3c16ffadd2ed9cbf6483cd81d106a2446dec273248e55020b850a64b25a2c707ae931d40b9ba8307910958eba6702c67827fd778f77334d19da1c0e5ad521a3a33562b08fd60f1f374caa"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0xc040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0xa}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000100)={0x5, 0x7, 0x2, 0x37, 0x100000001}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@loopback, @broadcast, r7}, 0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x1) 17:41:44 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000040)={0x3, 0x8, 0x7}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:44 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x10000, 0x1000, 0x8, 0x9, 0x400}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0xfff, 0x3, 0x4, 0x20, 0x800, {}, {0x2, 0x8, 0x7, 0x8, 0x0, 0x3, "74781128"}, 0x3ff, 0x1, @fd=r3, 0x7a2, 0x0, 0xffffffffffffffff}) sendmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x3f, 0x1, 0x0, 0x0, "2dcb670e463f284f174f00b764a54e65b19825c5852108ea9e837e75ce8eeb67033dd2b3228ba33377d6fd701b95f3312ec822592a1605b85591c749035b83ad"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) set_mempolicy(0x3, &(0x7f00000000c0)=0x1, 0x42) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x2000ff, 0xffffffffffffffff, 0x1, r7, 0x3000000}) 17:41:44 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0), 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:45 executing program 0: set_mempolicy(0x0, &(0x7f0000000040)=0x1, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x201, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x67060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1688.666932][ T3153] warn_alloc: 1 callbacks suppressed [ 1688.666951][ T3153] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1688.793842][ T3153] CPU: 1 PID: 3153 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1688.803508][ T3153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1688.813890][ T3153] Call Trace: [ 1688.817489][ T3153] dump_stack+0x188/0x20d [ 1688.821983][ T3153] warn_alloc.cold+0x87/0x164 [ 1688.826668][ T3153] ? zone_watermark_ok_safe+0x260/0x260 [ 1688.832748][ T3153] ? ___might_sleep+0x15a/0x2b0 [ 1688.837696][ T3153] ? __alloc_pages_direct_compact+0x366/0x420 [ 1688.843913][ T3153] ? get_page_from_freelist+0x3580/0x3580 [ 1688.849638][ T3153] ? __isolate_free_page+0x610/0x610 [ 1688.854928][ T3153] ? drain_all_pages+0x4a/0x5f0 [ 1688.859948][ T3153] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1688.866646][ T3153] ? get_page_from_freelist+0x1767/0x3580 [ 1688.872966][ T3153] ? warn_alloc+0x110/0x110 [ 1688.878194][ T3153] ? __isolate_free_page+0x610/0x610 [ 1688.884663][ T3153] __alloc_pages_nodemask+0x5d9/0x810 [ 1688.891030][ T3153] ? mutex_trylock+0x2c0/0x2c0 [ 1688.896413][ T3153] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1688.904364][ T3153] ? wait_for_completion+0x270/0x270 [ 1688.909865][ T3153] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1688.916469][ T3153] alloc_pages_current+0xff/0x200 [ 1688.921580][ T3153] ion_page_pool_alloc+0x186/0x280 [ 1688.926753][ T3153] ion_system_heap_allocate+0x321/0xb00 [ 1688.932305][ T3153] ? ion_system_heap_free+0x240/0x240 [ 1688.937668][ T3153] ? kfree+0x1eb/0x2b0 [ 1688.941738][ T3153] ? ion_ioctl+0x9da/0xca0 [ 1688.946155][ T3153] ? lockdep_hardirqs_on+0x463/0x620 [ 1688.951438][ T3153] ion_ioctl+0x37a/0xca0 [ 1688.955694][ T3153] ? _ion_buffer_destroy+0xa0/0xa0 [ 1688.960956][ T3153] ? ksys_dup3+0x3c0/0x3c0 [ 1688.965482][ T3153] ? __x64_sys_futex+0x380/0x4f0 [ 1688.970432][ T3153] ? _ion_buffer_destroy+0xa0/0xa0 [ 1688.976438][ T3153] ksys_ioctl+0x11a/0x180 [ 1688.981028][ T3153] __x64_sys_ioctl+0x6f/0xb0 [ 1688.985705][ T3153] ? lockdep_hardirqs_on+0x463/0x620 [ 1688.991052][ T3153] do_syscall_64+0xf6/0x7d0 [ 1688.995584][ T3153] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1689.001620][ T3153] RIP: 0033:0x45c829 [ 1689.005643][ T3153] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1689.025245][ T3153] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1689.034060][ T3153] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1689.042025][ T3153] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1689.049989][ T3153] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1689.058255][ T3153] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1689.066312][ T3153] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:41:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x68000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1690.149026][ T3153] Mem-Info: [ 1690.169673][ T3153] active_anon:230523 inactive_anon:6176 isolated_anon:0 [ 1690.169673][ T3153] active_file:968 inactive_file:4454 isolated_file:0 [ 1690.169673][ T3153] unevictable:0 dirty:31 writeback:0 unstable:0 [ 1690.169673][ T3153] slab_reclaimable:20078 slab_unreclaimable:154030 [ 1690.169673][ T3153] mapped:58332 shmem:6419 pagetables:4450 bounce:0 [ 1690.169673][ T3153] free:142383 free_pcp:305 free_cma:0 [ 1690.326820][ T3153] Node 0 active_anon:845776kB inactive_anon:16460kB active_file:136kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216920kB dirty:20kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1690.391291][ T1143] oom_reaper: reaped process 3172 (syz-executor.2), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1690.399100][ T3153] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2064kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.487800][ T3153] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1690.503563][ T3153] Node 0 DMA32 free:27952kB min:37980kB low:46960kB high:55940kB reserved_highatomic:2048KB active_anon:843712kB inactive_anon:16460kB active_file:36kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11376kB pagetables:14200kB bounce:0kB free_pcp:260kB local_pcp:96kB free_cma:0kB [ 1690.582295][ T3153] lowmem_reserve[]: 0 0 0 0 0 [ 1690.595544][ T3153] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1690.682916][ T3153] lowmem_reserve[]: 0 0 0 0 0 [ 1690.696650][ T3153] Node 0 DMA: 15*4kB (UME) 16*8kB (ME) 37*16kB (UME) 31*32kB (UME) 7*64kB (UM) 8*128kB (UM) 5*256kB (UM) 3*512kB (UE) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10156kB [ 1690.735848][ T3153] Node 0 DMA32: 208*4kB (UMEH) 94*8kB (UMH) 27*16kB (UMEH) 431*32kB (UMEH) 6*64kB (MEH) 2*128kB (E) 1*256kB (E) 4*512kB (UE) 0*1024kB 0*2048kB 0*4096kB = 18752kB [ 1690.800892][ T3153] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1690.907588][ T3153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.930046][ T3153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.953092][ T3153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1690.975809][ T3153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1690.996845][ T3153] 11875 total pagecache pages [ 1691.009191][ T3153] 0 pages in swap cache [ 1691.028258][ T3153] Swap cache stats: add 0, delete 0, find 0/0 [ 1691.047029][ T3153] Free swap = 0kB [ 1691.052409][ T3153] Total swap = 0kB [ 1691.056190][ T3153] 1965979 pages RAM [ 1691.060015][ T3153] 0 pages HighMem/MovableOnly [ 1691.104000][ T3153] 349380 pages reserved [ 1691.108661][ T3153] 0 pages cma reserved [ 1691.456413][ T1143] oom_reaper: reaped process 3153 (syz-executor.3), now anon-rss:0kB, file-rss:34784kB, shmem-rss:0kB 17:41:49 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1404, 0x20, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x77367a84708271bd}, 0x5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:50 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400002, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x4, 0x4) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000000)={0x9, 0xffffffffffffffcc, 0x1, r6, 0x3000000}) 17:41:50 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x68060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:50 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000214020029bd7000fbdbdf250900020073797a31000000000900020073797afdffffff0040b5bdac122ba8926c1ea23f6ca982b35ddca3d849027ac06667940c34bb946f27191016fe0400b8588e6c98f4b3766467926e39951c3b12ce3e25771d4661c3b809bdc3ddb58d90db7a4bf3171e2cfca61e10170f1ec68a50f158b7fa466eca9b07349cb014e868695460fdd71403ca195108e3c16ffadd2ed9cbf6483cd81d106a2446dec273248e55020b850a64b25a2c707ae931d40b9ba8307910958eba6702c67827fd778f77334d19da1c0e5ad521a3a33562b08fd60f1f374caa"], 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0xc040) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=@newqdisc={0x45c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8, 0x1, 'tbf\x00'}, {0x430, 0x2, [@TCA_TBF_PARMS={0xa}, @TCA_TBF_PTAB={0x404}]}}]}, 0x45c}}, 0x0) ioctl$TIOCL_SELLOADLUT(r2, 0x541c, &(0x7f0000000100)={0x5, 0x7, 0x2, 0x37, 0x100000001}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@loopback, @broadcast, r7}, 0xc) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x1) 17:41:50 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, r1, 0x3000000}) 17:41:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) geteuid() r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r3) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) fchown(r1, r4, r3) set_mempolicy(0xc001, &(0x7f00000000c0)=0x1, 0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x80}, 0x1) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x69060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x107000, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r4, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x7, 0x4}, &(0x7f0000000180)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file0\x00') 17:41:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0xfffffffffffffffb, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x240100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x145282, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x21e0c0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x204400, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000080)={0x5, 0x0, 0x3011, 0x6, 0x7, {0x9, 0x10001}, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) fcntl$addseals(r3, 0x409, 0x8) 17:41:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0200, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="bcb8b131ee41ceab0cb99180e1f4c4db7a97ff", @ANYRES16=r2, @ANYBLOB="01000000000000000000180000005d35d5ba98327cdbdeac199d"], 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10c, r2, 0xc02, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x48, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, [], 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3d3, @loopback, 0x1f}}}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x50801) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:51 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x404981) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x40) 17:41:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6a000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:52 executing program 2: rt_sigpending(&(0x7f0000000040), 0x8) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:52 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1694.737736][ T3303] syz-executor.3 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1694.799986][ T3303] CPU: 1 PID: 3303 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1694.808669][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1694.818901][ T3303] Call Trace: [ 1694.822199][ T3303] dump_stack+0x188/0x20d [ 1694.826528][ T3303] dump_header+0x10b/0x826 [ 1694.831101][ T3303] oom_kill_process.cold+0x10/0x15 [ 1694.836250][ T3303] out_of_memory+0x31f/0x12f0 [ 1694.841680][ T3303] ? oom_killer_disable+0x270/0x270 [ 1694.846879][ T3303] ? mutex_trylock+0x246/0x2c0 [ 1694.851729][ T3303] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1694.858493][ T3303] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1694.865176][ T3303] ? warn_alloc+0x110/0x110 [ 1694.869848][ T3303] __alloc_pages_nodemask+0x5d9/0x810 [ 1694.875219][ T3303] ? mutex_trylock+0x2c0/0x2c0 [ 1694.879980][ T3303] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1694.886743][ T3303] ? preempt_schedule_irq+0xee/0x150 [ 1694.892238][ T3303] ? wait_for_completion+0x270/0x270 [ 1694.897710][ T3303] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1694.904386][ T3303] alloc_pages_current+0xff/0x200 [ 1694.909470][ T3303] ion_page_pool_alloc+0x186/0x280 [ 1694.914714][ T3303] ion_system_heap_allocate+0x321/0xb00 [ 1694.920265][ T3303] ? ion_system_heap_free+0x240/0x240 [ 1694.925728][ T3303] ? lockdep_hardirqs_on+0x463/0x620 [ 1694.931197][ T3303] ion_ioctl+0x37a/0xca0 [ 1694.935533][ T3303] ? _ion_buffer_destroy+0xa0/0xa0 [ 1694.940665][ T3303] ? ksys_dup3+0x3c0/0x3c0 [ 1694.945133][ T3303] ? __x64_sys_futex+0x380/0x4f0 [ 1694.950202][ T3303] ? _ion_buffer_destroy+0xa0/0xa0 [ 1694.955600][ T3303] ksys_ioctl+0x11a/0x180 [ 1694.959931][ T3303] __x64_sys_ioctl+0x6f/0xb0 [ 1694.964519][ T3303] ? lockdep_hardirqs_on+0x463/0x620 [ 1694.969807][ T3303] do_syscall_64+0xf6/0x7d0 [ 1694.974312][ T3303] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1694.980376][ T3303] RIP: 0033:0x45c829 [ 1694.984429][ T3303] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1695.004176][ T3303] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1695.012672][ T3303] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1695.021017][ T3303] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1695.028983][ T3303] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1695.037014][ T3303] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1695.044980][ T3303] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:41:52 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1695.316576][ T3303] Mem-Info: [ 1695.319757][ T3303] active_anon:230542 inactive_anon:6176 isolated_anon:0 [ 1695.319757][ T3303] active_file:1142 inactive_file:4550 isolated_file:0 [ 1695.319757][ T3303] unevictable:0 dirty:5 writeback:0 unstable:0 [ 1695.319757][ T3303] slab_reclaimable:20224 slab_unreclaimable:155773 [ 1695.319757][ T3303] mapped:58580 shmem:6419 pagetables:4502 bounce:0 [ 1695.319757][ T3303] free:157529 free_pcp:439 free_cma:0 17:41:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6a060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1695.534762][ T3303] Node 0 active_anon:845952kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216424kB dirty:4kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 286720kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1695.700780][ T3303] Node 0 DMA free:10292kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1695.885240][ T3303] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1695.915871][ T3303] Node 0 DMA32 free:40176kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:843912kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11496kB pagetables:14304kB bounce:0kB free_pcp:1052kB local_pcp:852kB free_cma:0kB 17:41:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 1696.115927][ T3303] lowmem_reserve[]: 0 0 0 0 0 [ 1696.146707][ T3303] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1696.236276][ T3303] lowmem_reserve[]: 0 0 0 0 0 17:41:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) [ 1696.293208][ T3303] Node 0 DMA: 12*4kB (UME) 34*8kB (UME) 44*16kB (UME) 29*32kB (UME) 2*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10272kB [ 1696.397595][ T3303] Node 0 DMA32: 583*4kB (UME) 224*8kB (UME) 67*16kB (UM) 1088*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 40012kB [ 1696.447774][ T3303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1696.483331][ T3303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.528871][ T3303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1696.541976][ T3303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1696.554135][ T3303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1696.579069][ T3303] 12116 total pagecache pages [ 1696.592060][ T3303] 0 pages in swap cache [ 1696.600233][ T3303] Swap cache stats: add 0, delete 0, find 0/0 [ 1696.632148][ T3303] Free swap = 0kB [ 1696.657703][ T3303] Total swap = 0kB [ 1696.679926][ T3303] 1965979 pages RAM [ 1696.697139][ T3303] 0 pages HighMem/MovableOnly [ 1696.719123][ T3303] 349380 pages reserved [ 1696.737988][ T3303] 0 pages cma reserved [ 1696.757427][ T3303] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=1661,uid=0 [ 1696.807989][ T3303] Out of memory: Killed process 1661 (syz-executor.5) total-vm:74840kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 17:41:56 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6(0xa, 0x6, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000080)={0x6, &(0x7f0000000300)=[{@fixed}, {@none}, {@fixed}, {}, {@none}, {@none}]}) 17:41:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6b060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) 17:41:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:56 executing program 2: set_mempolicy(0x2, &(0x7f0000000040)=0xd0, 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000000c0)={0x0, 0x5, 0x100, &(0x7f0000000080)=0x4}) 17:41:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:57 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x404981) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)=0x40) 17:41:57 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x40ac03, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 17:41:57 executing program 3: rt_sigpending(&(0x7f0000000040), 0x8) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6c000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:57 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0xb800) shmdt(r1) 17:41:57 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000100)="66b9cc08000066b8fbffffff66baff7f00000f30baf80c66b88c99658366efbafc0cec66b8008000000f23c80f21f866350000f0000f23f865f2f7e4f38693cd003e0f7926e23dbaf80c66b8b455198a66efbafc0c66b8c600000066ef0f01c9c4e235dd5b00f30fc7772e", 0x6b}], 0x1, 0x68, &(0x7f0000000180)=[@dstype0={0x6, 0x8}], 0x1) 17:41:57 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:57 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r3, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) 17:41:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r5, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r5, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r6, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCSCTTY(r6, 0x540e, 0x1) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6c060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:41:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x0, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1700.533879][ T3427] warn_alloc: 4 callbacks suppressed [ 1700.533899][ T3427] syz-executor.3: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1700.651654][ T3427] CPU: 0 PID: 3427 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1700.660279][ T3427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1700.670374][ T3427] Call Trace: [ 1700.673693][ T3427] dump_stack+0x188/0x20d [ 1700.678059][ T3427] warn_alloc.cold+0x87/0x164 [ 1700.682760][ T3427] ? zone_watermark_ok_safe+0x260/0x260 [ 1700.688343][ T3427] ? ___might_sleep+0x15a/0x2b0 [ 1700.693219][ T3427] ? __alloc_pages_direct_compact+0x366/0x420 [ 1700.699298][ T3427] ? get_page_from_freelist+0x3580/0x3580 [ 1700.705023][ T3427] ? __isolate_free_page+0x610/0x610 [ 1700.710329][ T3427] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1700.716931][ T3427] ? get_page_from_freelist+0x1767/0x3580 [ 1700.722748][ T3427] ? warn_alloc+0x110/0x110 [ 1700.727285][ T3427] ? __isolate_free_page+0x610/0x610 [ 1700.732596][ T3427] __alloc_pages_nodemask+0x5d9/0x810 [ 1700.737982][ T3427] ? mutex_trylock+0x2c0/0x2c0 [ 1700.742761][ T3427] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1700.749541][ T3427] ? mark_lock+0x12b/0xf10 [ 1700.753971][ T3427] ? wait_for_completion+0x270/0x270 [ 1700.759271][ T3427] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1700.765704][ T3427] alloc_pages_current+0xff/0x200 [ 1700.770755][ T3427] ion_page_pool_alloc+0x186/0x280 [ 1700.775885][ T3427] ion_system_heap_allocate+0x321/0xb00 [ 1700.781650][ T3427] ? ion_system_heap_free+0x240/0x240 [ 1700.787039][ T3427] ? kfree+0x1eb/0x2b0 [ 1700.791135][ T3427] ? ion_ioctl+0x9da/0xca0 [ 1700.795566][ T3427] ? lockdep_hardirqs_on+0x463/0x620 [ 1700.800878][ T3427] ion_ioctl+0x37a/0xca0 [ 1700.805175][ T3427] ? _ion_buffer_destroy+0xa0/0xa0 [ 1700.810322][ T3427] ? ksys_dup3+0x3c0/0x3c0 [ 1700.815033][ T3427] ? __x64_sys_futex+0x380/0x4f0 [ 1700.820029][ T3427] ? _ion_buffer_destroy+0xa0/0xa0 [ 1700.825269][ T3427] ksys_ioctl+0x11a/0x180 [ 1700.829723][ T3427] __x64_sys_ioctl+0x6f/0xb0 [ 1700.834334][ T3427] ? lockdep_hardirqs_on+0x463/0x620 [ 1700.839645][ T3427] do_syscall_64+0xf6/0x7d0 [ 1700.844176][ T3427] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1700.850072][ T3427] RIP: 0033:0x45c829 [ 1700.854070][ T3427] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1700.873847][ T3427] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1700.882265][ T3427] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1700.890260][ T3427] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1700.898252][ T3427] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1700.906320][ T3427] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1700.914302][ T3427] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:41:58 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101041, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x37, [], 0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000080)=""/43}, &(0x7f0000000200)=0x78) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:41:59 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000080)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1701.514024][ T3441] syz-executor.0 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1701.577033][ T3441] CPU: 0 PID: 3441 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 1701.585643][ T3441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1701.595858][ T3441] Call Trace: [ 1701.599142][ T3441] dump_stack+0x188/0x20d [ 1701.603477][ T3441] dump_header+0x10b/0x826 [ 1701.607880][ T3441] oom_kill_process.cold+0x10/0x15 [ 1701.612975][ T3441] out_of_memory+0x31f/0x12f0 [ 1701.617634][ T3441] ? oom_killer_disable+0x270/0x270 [ 1701.622822][ T3441] ? mutex_trylock+0x246/0x2c0 [ 1701.627588][ T3441] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1701.634263][ T3441] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1701.640852][ T3441] ? warn_alloc+0x110/0x110 [ 1701.645355][ T3441] __alloc_pages_nodemask+0x5d9/0x810 [ 1701.650709][ T3441] ? mutex_trylock+0x2c0/0x2c0 [ 1701.655464][ T3441] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1701.662219][ T3441] ? preempt_schedule_irq+0xee/0x150 [ 1701.668278][ T3441] ? wait_for_completion+0x270/0x270 [ 1701.673548][ T3441] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1701.679952][ T3441] alloc_pages_current+0xff/0x200 [ 1701.684971][ T3441] ion_page_pool_alloc+0x186/0x280 [ 1701.690068][ T3441] ion_system_heap_allocate+0x321/0xb00 [ 1701.695604][ T3441] ? ion_system_heap_free+0x240/0x240 [ 1701.700958][ T3441] ? kfree+0x1eb/0x2b0 [ 1701.705297][ T3441] ? ion_ioctl+0x9da/0xca0 [ 1701.709700][ T3441] ? lockdep_hardirqs_on+0x463/0x620 [ 1701.714974][ T3441] ion_ioctl+0x37a/0xca0 [ 1701.719208][ T3441] ? _ion_buffer_destroy+0xa0/0xa0 [ 1701.724320][ T3441] ? ksys_dup3+0x3c0/0x3c0 [ 1701.728722][ T3441] ? __x64_sys_futex+0x380/0x4f0 [ 1701.733826][ T3441] ? _ion_buffer_destroy+0xa0/0xa0 [ 1701.738921][ T3441] ksys_ioctl+0x11a/0x180 [ 1701.743255][ T3441] __x64_sys_ioctl+0x6f/0xb0 [ 1701.747846][ T3441] ? lockdep_hardirqs_on+0x463/0x620 [ 1701.753139][ T3441] do_syscall_64+0xf6/0x7d0 [ 1701.757633][ T3441] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1701.763507][ T3441] RIP: 0033:0x45c829 [ 1701.767391][ T3441] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1701.786991][ T3441] RSP: 002b:00007fe2c2713c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1701.795395][ T3441] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1701.803613][ T3441] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1701.811598][ T3441] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1701.819565][ T3441] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1701.827607][ T3441] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fe2c27146d4 17:41:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6d060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1702.266013][ T3427] Mem-Info: [ 1702.274945][ T3427] active_anon:231874 inactive_anon:6176 isolated_anon:0 [ 1702.274945][ T3427] active_file:1189 inactive_file:4737 isolated_file:0 [ 1702.274945][ T3427] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1702.274945][ T3427] slab_reclaimable:19708 slab_unreclaimable:157622 [ 1702.274945][ T3427] mapped:58840 shmem:6419 pagetables:4435 bounce:0 [ 1702.274945][ T3427] free:65087 free_pcp:354 free_cma:0 [ 1702.317057][ T3427] Node 0 active_anon:843812kB inactive_anon:16464kB active_file:16kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216424kB dirty:0kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1702.346940][ T3427] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.389866][ T3427] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1702.395810][ T3427] Node 0 DMA32 free:35732kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:841772kB inactive_anon:16464kB active_file:16kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11436kB pagetables:14052kB bounce:0kB free_pcp:1444kB local_pcp:1184kB free_cma:0kB [ 1702.476585][ T3441] Mem-Info: [ 1702.479762][ T3441] active_anon:231874 inactive_anon:6176 isolated_anon:0 [ 1702.479762][ T3441] active_file:1190 inactive_file:4735 isolated_file:0 [ 1702.479762][ T3441] unevictable:0 dirty:20 writeback:1 unstable:0 [ 1702.479762][ T3441] slab_reclaimable:19708 slab_unreclaimable:157589 [ 1702.479762][ T3441] mapped:58840 shmem:6419 pagetables:4450 bounce:0 [ 1702.479762][ T3441] free:66739 free_pcp:381 free_cma:0 17:42:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6db875fa, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1702.626022][ T3427] lowmem_reserve[]: 0 0 0 0 0 [ 1702.635765][ T3441] Node 0 active_anon:843716kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216436kB dirty:4kB writeback:8kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1702.678010][ T3427] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.810208][ T3441] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1702.865946][ T3427] lowmem_reserve[]: 0 0 0 0 0 [ 1702.880027][ T3427] Node 0 DMA: 10*4kB (UME) 42*8kB (UME) 45*16kB (UME) 29*32kB (UME) 1*64kB (M) 8*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10280kB [ 1702.970118][ T3427] Node 0 DMA32: 701*4kB (UME) 293*8kB (UME) 71*16kB (UME) 1010*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38604kB [ 1702.979078][ T3441] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1703.030330][ T3427] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1703.055720][ T3441] Node 0 DMA32 free:35788kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:841676kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11408kB pagetables:14096kB bounce:0kB free_pcp:1596kB local_pcp:1348kB free_cma:0kB [ 1703.122517][ T3427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.147197][ T3427] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.188429][ T3427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.218899][ T3427] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.220000][ T3441] lowmem_reserve[]: 0 0 0 0 0 [ 1703.244120][ T3427] 12352 total pagecache pages [ 1703.255448][ T3427] 0 pages in swap cache [ 1703.267279][ T3427] Swap cache stats: add 0, delete 0, find 0/0 [ 1703.277135][ T3441] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1703.316077][ T3427] Free swap = 0kB 17:42:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6e060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1703.352753][ T3427] Total swap = 0kB [ 1703.367869][ T3427] 1965979 pages RAM [ 1703.399224][ T3427] 0 pages HighMem/MovableOnly [ 1703.423135][ T3427] 349380 pages reserved [ 1703.437740][ T3427] 0 pages cma reserved [ 1703.448634][ T3441] lowmem_reserve[]: 0 0 0 0 0 [ 1703.457126][ T3441] Node 0 DMA: 10*4kB (UME) 43*8kB (UME) 45*16kB (UME) 29*32kB (UME) 1*64kB (M) 8*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10288kB 17:42:01 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x100, 0x2, 0x1, r1, 0x3000000}) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00') r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x6, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="666f1dc94f4d49e0b70edc7131bf83dda2cf6d34ea082a124ec1e96cac39dda81ac98f3905000000ec16c653abae886afaa68763896c92b3be6ceb40bcfcdd8d548ce1905aae4d1f500d75315f2df8080e0f3946d422f944855361735d270a66f09f523870f062d8", @ANYRES16=r5, @ANYBLOB="d57f0047c48477d3e6e04e", @ANYRES32=r2], 0x4}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00') sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000027bd7000fbdbdf25020000000c000300020000000000000008000700", @ANYRES32=r1, @ANYBLOB="0c000300010000000000000008000700", @ANYRES32=r7, @ANYBLOB="080012000100000008000102", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x40841}, 0x4000) ioctl$IMCTRLREQ(0xffffffffffffffff, 0x80044945, &(0x7f0000000500)={0x4000, 0x0, 0x100, 0x5}) [ 1703.566825][ T3441] Node 0 DMA32: 409*4kB (ME) 193*8kB (UME) 83*16kB (UME) 1016*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37020kB [ 1703.651981][ T3441] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1703.713132][ T3441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1703.763848][ T3441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.819259][ T3441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:42:01 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0xa2, 0x4, &(0x7f0000000040)=[0x1, 0x7c2, 0x1, 0x9], &(0x7f0000000080)=[0x1], &(0x7f0000000100)=[0x9], &(0x7f0000000140)=[0xd13, 0x45]}) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1703.874176][ T3441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1703.915951][ T3441] 12356 total pagecache pages [ 1703.927636][ T3441] 0 pages in swap cache [ 1703.962575][ T3441] Swap cache stats: add 0, delete 0, find 0/0 [ 1704.014288][ T3441] Free swap = 0kB [ 1704.037377][ T3441] Total swap = 0kB [ 1704.056134][ T3441] 1965979 pages RAM [ 1704.074033][ T3441] 0 pages HighMem/MovableOnly [ 1704.090495][ T3441] 349380 pages reserved [ 1704.105762][ T3441] 0 pages cma reserved [ 1704.122469][ T3441] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=25553,uid=0 [ 1704.190169][ T3441] Out of memory: Killed process 25553 (syz-executor.1) total-vm:74972kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1704.870611][ T1143] oom_reaper: reaped process 3441 (syz-executor.0), now anon-rss:0kB, file-rss:34764kB, shmem-rss:0kB [ 1704.905625][ T1143] oom_reaper: reaped process 3445 (syz-executor.4), now anon-rss:0kB, file-rss:34792kB, shmem-rss:0kB 17:42:04 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x208000, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000080)={0x7, 0x1b, 0x1}, 0x7) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10008, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000180)={'vcan0\x00', {0x2, 0x4e21, @remote}}) ioctl$VIDIOC_S_PRIORITY(r0, 0x40045644, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) recvfrom$packet(r6, &(0x7f00000001c0)=""/188, 0xbc, 0x100, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f0000000100), &(0x7f0000000140)=0x10) 17:42:04 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x44801, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x6f060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:04 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 0: set_mempolicy(0x0, &(0x7f0000000040)=0x80000000811e, 0x100000001) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 1: set_mempolicy(0x2, &(0x7f0000000040)=0xffffffffffd, 0x82) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x309d82, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 1: set_mempolicy(0x4000, &(0x7f00000000c0)=0xffffffffffffffff, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:04 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000040)) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000040)) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) r5 = mq_open(&(0x7f0000000000)='eth0\x00', 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r5, r7, r9) r10 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r11) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000006900)={&(0x7f0000001580)=@proc={0x10, 0x0, 0x25dfdbfb, 0x80000000}, 0xc, &(0x7f0000006300)=[{&(0x7f00000015c0)={0x22ac, 0x3b, 0x10, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x113a, 0x76, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @uid}, @generic="a295e7f244fe93e13dea4f18425514fdbd50ed7614a1028fbe3adf7777d70ada9abf13dab03a8d00b7f082cd", @generic="bc4cdfd246898e620284bbae024f3ac88485d869db9ee68cfc0b1da3b959d77e615a2a98aad3d3d2ba0017e8fa6422df80a34bc94fdf9b4282ad7e98f3122a4e26c5d1a674283ef37c21e6fb504cd96433d8555f293cff379015bd1b9eb1bb593ced4a3c5352112efb09c2d9ddcfa016896eb8aa588c6eb39b2aa820b95a9215dbf7ffb307e7a76e07f25c12689dfbfc", @typed={0x14, 0x7a, 0x0, 0x0, @ipv6=@private1}, @generic="0f32dd061c2b0eed4213d67e445853e61f671d7dce0170c249cb5362f63d7e20f8298fc2c95c6cb2ebe287ca1c66c9f00cf03c5adb89bbe8f0010133cd20458b310ae576f1e6463fe65972b03822e05e53b5", @typed={0x8, 0x5, 0x0, 0x0, @str=':.@\x00'}, @typed={0x1004, 0x71, 0x0, 0x0, @binary="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"}]}, @generic="36e960a624f6788b37b0dd5a7b199fde8da9d986e84f322c2e76c8c376cc7f1d63c150cccc9fbeb522e9dd4e71c81ed5223857a920976d2d6aad8fec1ebf69c45a69181126f188822b213405ad192d068de4e2022b460b0a1e338ebb64bdc60c27e9e733288ed9f98e37aaa47c47177e24f8cb7e37311e4e4ff6f43537328eaf588b4dcf582fff1c5a08080be03150234a38cb5b8962be331371b42433bf4ef3c208e04151ba13e0440c0c148315ef59bfa9f07dc4cc8f0f31fd810790", @generic="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", @typed={0x8, 0x66, 0x0, 0x0, @uid}, @nested={0x10, 0x16, 0x0, 0x1, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0x6}]}, @generic="1882c1de703d81a15bcbd3becbcab21f81b3c6c4aec01095202e00dc718cbdb96349f607249ab3a62b70dd422ec64d716931cef8876498abab62795bd391f59db26231ec96e12ad05250561c592e31ec5c0acd4b3d6d294d59905e23c83c01ce9bef5b90fbaa991516e5530400395ef1c76d279bb2c0c4465c8833b83aaccf8fd5f3"]}, 0x22ac}, {&(0x7f0000003900)={0x1c0, 0x24, 0x8, 0x70bd25, 0x25dfdbfb, "", [@generic="08937fb05d05c10e822769d3341e4356b997845ab6ac677a0142c538658bc5de187cab712ef4983276197a36f6da9d3d7d0713778ebb01d634d9923dba0f7db134929ef6fddb0399a2b2af5644e8b7b56be4e5139ac9f8c1f81c63ba21239940e3c37fdcc8dd846da13ed0dc894b78d77f4cf954e77086d266ccf0adcf65c5bc1d463ace1d", @generic="dfcaa4796710cd45eb30617311cc9d75a20a96d5e60eb72f3edca1e94d45d0e1bfc1dad380b47557013b617fac05e83fadc1ddcc1d36068160cb830e57b3f3e5c4f35be246bbecb8b568eab61179cf3cdcca17dc54be1215c639ac830a0ca770f14f8dfbcbec52b6f7c947ae2845e3404f46e52f26f554b3aa057800b006842cf320cf3cab9fbbd0b7106ea73411ac53df259a4028", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@remote}, @typed={0x5, 0x77, 0x0, 0x0, @str='\x00'}, @nested={0x78, 0x20, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @uid}, @typed={0x8, 0x6b, 0x0, 0x0, @u32=0x5}, @generic="e4a6d2d5b3e35c4187b3cbaff69daff57fa47a1a33ff68e7129495da2dcf7c7cb5bcdd651c75c5d36905c74a86ce416976997344092505f1f9f0109759f5669036590e89abf18a25173d42028b3d343881c283a87ef19c33e29052b10b3a1f16956468e1"]}, @nested={0xc, 0x24, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid}]}]}, 0x1c0}, {&(0x7f0000003ac0)={0x27e4, 0x1d, 0x400, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x23, 0x0, 0x0, @pid}, @nested={0xf4, 0x8, 0x0, 0x1, [@generic="f746412c99e16747a5dd64fd1140b6906311f10f27e7afd804c1d2fc98d6de2fd5cfca69c3499e2f154c85c6fcfd495d2815acde0c7a7a7a8a7bd0b0eb160d83d490959aa99aacc737357b833895a3559f8720abe4d023c00771333117485208cd27", @typed={0x8, 0xc, 0x0, 0x0, @u32=0x80}, @generic="5b147ba7d096f24887a992bd0e76d176fbc755bf8cb99a91a24f15a072c0e20b99400c1ed6c24b877f135320f62c8b2bd461e4988c3f2951951c691fe45d64c36dce95a71c210dc3708c9db019296b", @generic="5643b421a9169eaaabde54d89a444f09af2e97eb6e0edda587ac240595fe5432ffa2ffef193a82a5676ee1f3fb05e24f1b814b4bb163a0"]}, @nested={0x1144, 0x8c, 0x0, 0x1, [@typed={0x72, 0x29, 0x0, 0x0, @binary="3703c0f2ed87c9ecc8791984be89d7cd4239de86e8114e5f499311d1f525f425223882460daeca324ea9de3ec9155358a85da29f34a42a180fb1b187405b946931cbd5335304140f45f88fc6a102e13deea0be8acea01566673a4d764ef86b223119b723a3298bebea94ff7bfc5f"}, @generic="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", @generic="469bd1dd9985114a1e424d68ab12d97cbd4b000532f9b755f8cb7e14ccd945b077638b0ed3fb7854abd5495686d9cc680244a86bcb5b14858ecd153b403f12b0c32e9371007a16780abff08c4ee62c3a9368173e2599a24b5d8ac34b7a07adbbbac805662fc284f10571c64a03e600703965d1de4cd5779ed200c305f864f6a380d7567daaf897f831c1c5150f4ef6fa5ff27d32cb455568514b6892b030ce2a0337c1f1138f8541f47556ff8e7fd0f627f1834cd14368581b1108f03e8ff3b4807f30ac89a017cf86c77c33"]}, @nested={0x1a5, 0x32, 0x0, 0x1, [@generic="ab275cbc72aa1eafa7d55feff92010bdf289df6201430dd118ab7a27b097b3d03ebe95b826854b35cf45454e71769e8c4cd0039e75c79d9abda93db35595", @generic="593b5f1dbd597eabb7691076f02a07391d5b6fb62531acd800865966fbb098ae48247630c6e66791d881185183daec6a9239664379f04377a7f551ac73c732f6cf84315783c9d86bab5c0d8ae1a53b38388302ddd618e85b90fe343e4cff232254ca55eb", @generic="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"]}, @nested={0x304, 0x61, 0x0, 0x1, [@generic="94d1165a29f78d5fb83c358501f3ce29915c40fdaf9970d6972edd33a0c5e473197d450cc33984eb653d27c2cb6b7acfb7f1a6631e1cf5bb6153bc2dcd9647bdbb02b4877c6c5e2785be86cb0d9607de10e4e2f9675b1f52c17a413433a5d7c354fd9ea278308f00a396700039966062cb4e8b3d8d6489c2f4c1a67973f7a341326cb9ead8f6727aafb654f088ae846666049636e231505e3bb7", @generic="1b769c88042eaf8dbdd5b09bf18822f3faeb878a4255af8e85137f984abb6194c89083f759af60d8d336", @generic="405423dd946e42d53b2a8345b54cb95786480527d3479faf1433063c47a9925a40cc802f68ffd5d634b23a33764503112f8f70eda0209814bdec6a2d4ba4ba2052cf2165ec9380fb63efdc4248103aa5a7c8be68364819d4d4e7f20146e39dc924acb7d11d683df1e8f168d1c46690a1766045ce4851e89f4d3661525b42bb847611f72382ae07bb1826860e105f1dcaadc9d50893f31d947d025f7d02c1e10eeecc853ea715e3c71e8cc9d9d281ad5fb520c14047ebd86ce8b62ed6ff927b3b8ecc86cbe1c7a9e470877700b82b0815cd46778f69ec9e68d4f824732db59021f4430afcf2", @generic="26f6ec43f9d9706c5cf47f1e0348ff38497743dc23d59892edbcdde577b06b9fca4db7407afc1f0e793b590a14ec7bd7a09df31a0439f359212aa06b4fd993681ff6cbb4c2fa878df17e455d9bfbadaf06cacc9abb040fdcc6951eb0d828b64d726972dc265fa750ae773d0a5c8cff66395934b15d134ab3a730273e694b9fa39d5dda079540bf100ef4f8f94e75f039c30af2bdaace5b02b6f4494034b135d584211b0a5ce3e6418165cdc4bd167f1e16411d136ec99c534faebda43224505d912d9ccf5499efbf418e916ab1c09229d3e2c64ec538bfd421808c3b10ffdd7ed006d2249160", @generic="5c62cd889dca5e6bedf3d6283ee98fe0dadd7f6d79d180613b5444c5ef2fd25527e8e1c0463d0e899e267b439c6fe06c958bdf80cf968a75d6dccd9f17963e0b60b38026aa1c258aa3442abb29b373fe02e9de717af0110d83ce43793ff08bec4b451608d8dec217ac", @typed={0x8, 0x53, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="8266ad4a3da9e5d345e8a4d154d1799e613b90bd9fe9fe176bd1fbad58fb8509fbb4d7a49a21b1279a00dc8f2460f9244b25ecfe3e6903aee08b9227e1e960cdc5f3c2ef4f66af16033811a2caba573e12e30ef2846623a96e431b0e16f4ec4bf92445842ee3b3f163146cf960aed2efb27a1b3bb48bb456d93534674fd58df89f2ab531592e664ce55c496180e57c9058e285f1fb033645089759b6e371728b0d4e83c0b95605a7fd1e9edb658ff6a40e5c9b5278f8fcf1fb24012dd5d2cb593c7e40a3acdb601a53250a922c9548", @generic="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", @typed={0xd, 0x82, 0x0, 0x0, @str='/dev/kvm\x00'}]}, 0x27e4}, {&(0x7f00000062c0)={0x18, 0x24, 0x0, 0x70bd28, 0x25dfdbfd, "", [@typed={0x8, 0x24, 0x0, 0x0, @u32}]}, 0x18}], 0x4, &(0x7f0000006840)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r7, r11}}}], 0xa0, 0x4000}, 0x24000040) 17:42:05 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000080)=0x78) r5 = dup(r2) lseek(r1, 0x0, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000100)=""/194, &(0x7f0000000040)=0xc2) 17:42:05 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:05 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:05 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x400, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r4, 0x0, 0x0, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000200", @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x20049045}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x70000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:05 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:05 executing program 0: set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x800002) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) 17:42:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r0) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '/dev/ion\x00', 0x20, 0x6, 0x20, [0x63, 0x61, 0x33]}, 0x38, 0xfffffffffffffffa) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1707.899906][ T3541] syz-executor.4 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1707.957074][ T3541] CPU: 1 PID: 3541 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1707.966163][ T3541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1707.976264][ T3541] Call Trace: [ 1707.979578][ T3541] dump_stack+0x188/0x20d [ 1707.983944][ T3541] dump_header+0x10b/0x826 [ 1707.988386][ T3541] oom_kill_process.cold+0x10/0x15 [ 1707.993779][ T3541] out_of_memory+0x31f/0x12f0 [ 1707.998476][ T3541] ? oom_killer_disable+0x270/0x270 [ 1708.003692][ T3541] ? mutex_trylock+0x246/0x2c0 [ 1708.008466][ T3541] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1708.015158][ T3541] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1708.021889][ T3541] ? print_usage_bug+0x207/0x240 [ 1708.026862][ T3541] ? warn_alloc+0x110/0x110 [ 1708.031398][ T3541] ? _raw_spin_unlock_irqrestore+0x9b/0xe0 [ 1708.037237][ T3541] __alloc_pages_nodemask+0x5d9/0x810 [ 1708.042636][ T3541] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1708.049504][ T3541] ? wake_up_q+0xc1/0x140 [ 1708.053856][ T3541] ? do_raw_spin_unlock+0x171/0x260 [ 1708.059078][ T3541] ? wait_for_completion+0x270/0x270 [ 1708.064387][ T3541] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1708.070830][ T3541] alloc_pages_current+0xff/0x200 [ 1708.075889][ T3541] ion_page_pool_alloc+0x186/0x280 [ 1708.081026][ T3541] ion_system_heap_allocate+0x321/0xb00 [ 1708.086608][ T3541] ? ion_system_heap_free+0x240/0x240 [ 1708.092000][ T3541] ? kfree+0x1eb/0x2b0 [ 1708.096091][ T3541] ? ion_ioctl+0x9da/0xca0 [ 1708.100529][ T3541] ? lockdep_hardirqs_on+0x463/0x620 [ 1708.105840][ T3541] ion_ioctl+0x37a/0xca0 [ 1708.110119][ T3541] ? _ion_buffer_destroy+0xa0/0xa0 [ 1708.115264][ T3541] ? ksys_dup3+0x3c0/0x3c0 [ 1708.119698][ T3541] ? __x64_sys_futex+0x380/0x4f0 [ 1708.124666][ T3541] ? _ion_buffer_destroy+0xa0/0xa0 [ 1708.129803][ T3541] ksys_ioctl+0x11a/0x180 [ 1708.134154][ T3541] __x64_sys_ioctl+0x6f/0xb0 [ 1708.138763][ T3541] ? lockdep_hardirqs_on+0x463/0x620 [ 1708.144069][ T3541] do_syscall_64+0xf6/0x7d0 [ 1708.148683][ T3541] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1708.154587][ T3541] RIP: 0033:0x45c829 [ 1708.158670][ T3541] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1708.178286][ T3541] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.186722][ T3541] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1708.194717][ T3541] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000005 [ 1708.202707][ T3541] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1708.210692][ T3541] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1708.218678][ T3541] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 [ 1708.333375][ T3541] Mem-Info: [ 1708.336822][ T3541] active_anon:231348 inactive_anon:6176 isolated_anon:0 [ 1708.336822][ T3541] active_file:1202 inactive_file:4748 isolated_file:0 [ 1708.336822][ T3541] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1708.336822][ T3541] slab_reclaimable:19423 slab_unreclaimable:157483 [ 1708.336822][ T3541] mapped:58880 shmem:6419 pagetables:4478 bounce:0 [ 1708.336822][ T3541] free:100446 free_pcp:279 free_cma:0 [ 1708.384579][ T3541] Node 0 active_anon:841684kB inactive_anon:16464kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216436kB dirty:12kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 284672kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1708.427155][ T3541] Node 0 DMA free:10276kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1708.496524][ T3541] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1708.506302][ T3541] Node 0 DMA32 free:35840kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:839644kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11516kB pagetables:14332kB bounce:0kB free_pcp:676kB local_pcp:380kB free_cma:0kB [ 1708.550651][ T3541] lowmem_reserve[]: 0 0 0 0 0 [ 1708.555619][ T3541] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:42:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x70060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1708.597827][ T3541] lowmem_reserve[]: 0 0 0 0 0 [ 1708.610058][ T3541] Node 0 DMA: 8*4kB (UE) 61*8kB (UME) 44*16kB (UME) 27*32kB (UME) 2*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10280kB [ 1708.682592][ T3541] Node 0 DMA32: 405*4kB (UME) 172*8kB (UME) 29*16kB (ME) 778*32kB (UE) 48*64kB (UM) 97*128kB (UM) 9*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 46148kB [ 1708.765458][ T3541] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1708.829981][ T3541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.871023][ T3541] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.912332][ T3541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1708.952194][ T3541] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1708.995866][ T3541] 12374 total pagecache pages [ 1709.015971][ T3541] 0 pages in swap cache [ 1709.037988][ T3541] Swap cache stats: add 0, delete 0, find 0/0 [ 1709.046835][ T3541] Free swap = 0kB [ 1709.052958][ T3541] Total swap = 0kB [ 1709.074672][ T3541] 1965979 pages RAM [ 1709.078695][ T3541] 0 pages HighMem/MovableOnly [ 1709.086358][ T3541] 349380 pages reserved [ 1709.109074][ T3541] 0 pages cma reserved [ 1709.139678][ T3541] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=24348,uid=0 [ 1709.166569][ T3541] Out of memory: Killed process 24348 (syz-executor.2) total-vm:75236kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1709.211214][ T1143] oom_reaper: reaped process 3538 (syz-executor.3), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB [ 1709.258717][ T1143] oom_reaper: reaped process 3557 (syz-executor.0), now anon-rss:0kB, file-rss:34764kB, shmem-rss:0kB [ 1709.316553][ T1143] oom_reaper: reaped process 3550 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB [ 1709.386394][ T1143] oom_reaper: reaped process 3541 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 17:42:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x71060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1709.474377][ T1143] oom_reaper: reaped process 3543 (syz-executor.2), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 17:42:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x72060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:08 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000100)={0x33, 0x20, 0x10, 0x16, 0x6, 0x6, 0x9, 0xda, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20421, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @mcast1, 0x200}}, 0x24) r6 = pkey_alloc(0x0, 0x0) pkey_free(r6) pkey_mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, r6) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000080)=0x3ff) [ 1711.095516][ T3577] syz-executor.5 invoked oom-killer: gfp_mask=0x40cc0(GFP_KERNEL|__GFP_COMP), order=0, oom_score_adj=1000 [ 1711.162949][ T3577] CPU: 0 PID: 3577 Comm: syz-executor.5 Not tainted 5.7.0-rc4-syzkaller #0 [ 1711.171569][ T3577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1711.181634][ T3577] Call Trace: [ 1711.184942][ T3577] dump_stack+0x188/0x20d [ 1711.189289][ T3577] dump_header+0x10b/0x826 [ 1711.193987][ T3577] oom_kill_process.cold+0x10/0x15 [ 1711.199138][ T3577] out_of_memory+0x31f/0x12f0 [ 1711.203819][ T3577] ? oom_killer_disable+0x270/0x270 [ 1711.209009][ T3577] ? mutex_trylock+0x246/0x2c0 [ 1711.213761][ T3577] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1711.220421][ T3577] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1711.227030][ T3577] ? warn_alloc+0x110/0x110 [ 1711.231534][ T3577] __alloc_pages_nodemask+0x5d9/0x810 [ 1711.236898][ T3577] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1711.243701][ T3577] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1711.250467][ T3577] ? mark_held_locks+0x9f/0xe0 [ 1711.255231][ T3577] cache_grow_begin+0x8c/0xc10 [ 1711.259982][ T3577] fallback_alloc+0x203/0x2d0 [ 1711.264733][ T3577] kmem_cache_alloc_trace+0x21a/0x7d0 [ 1711.270151][ T3577] ? blocking_notifier_call_chain+0x54/0xa0 [ 1711.276089][ T3577] ipv6_add_addr+0x367/0x1d50 [ 1711.280812][ T3577] ? ip6_route_add+0xf5/0x120 [ 1711.285495][ T3577] ? addrconf_sysctl_stable_secret+0x760/0x760 [ 1711.291659][ T3577] ? add_addr+0xcf/0x2b0 [ 1711.295898][ T3577] add_addr+0xcf/0x2b0 [ 1711.299952][ T3577] ? in6_ifa_put+0xa0/0xa0 [ 1711.304359][ T3577] ? ipv6_find_idev+0x100/0x210 [ 1711.309204][ T3577] addrconf_notify+0x1ae6/0x2310 [ 1711.314135][ T3577] ? inet6_ifinfo_notify+0x150/0x150 [ 1711.319476][ T3577] ? clusterip_netdev_event+0x465/0x640 [ 1711.325031][ T3577] ? clusterip_netdev_event+0x465/0x640 [ 1711.330614][ T3577] ? tee_netdev_event+0x431/0x5d0 [ 1711.335670][ T3577] ? ip6mr_device_event+0x1ab/0x220 [ 1711.340890][ T3577] ? notifier_call_chain+0xc0/0x230 [ 1711.346105][ T3577] notifier_call_chain+0xc0/0x230 [ 1711.351164][ T3577] call_netdevice_notifiers_info+0xb5/0x130 [ 1711.357084][ T3577] __dev_notify_flags+0x121/0x2c0 [ 1711.362107][ T3577] ? dev_change_name+0x930/0x930 [ 1711.367053][ T3577] ? dev_set_allmulti+0x30/0x30 [ 1711.372294][ T3577] rtnl_configure_link+0x169/0x250 [ 1711.377410][ T3577] __rtnl_newlink+0xf3f/0x1590 [ 1711.382170][ T3577] ? rtnl_link_unregister+0x240/0x240 [ 1711.387527][ T3577] ? entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1711.393604][ T3577] ? is_bpf_text_address+0xcb/0x160 [ 1711.398785][ T3577] ? kernel_text_address+0x6e/0xe0 [ 1711.403899][ T3577] ? __kernel_text_address+0x9/0x30 [ 1711.409124][ T3577] ? unwind_get_return_address+0x5a/0xa0 [ 1711.414741][ T3577] ? profile_setup.cold+0xc1/0xc1 [ 1711.419772][ T3577] ? arch_stack_walk+0x84/0xd0 [ 1711.424531][ T3577] ? stack_trace_save+0x8c/0xc0 [ 1711.429384][ T3577] ? stack_trace_consume_entry+0x160/0x160 [ 1711.435230][ T3577] ? rtnl_newlink+0x46/0xa0 [ 1711.439718][ T3577] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1711.445247][ T3577] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1711.451212][ T3577] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1711.457028][ T3577] rtnl_newlink+0x64/0xa0 [ 1711.461359][ T3577] ? __rtnl_newlink+0x1590/0x1590 [ 1711.466368][ T3577] rtnetlink_rcv_msg+0x44e/0xad0 [ 1711.471295][ T3577] ? rtnl_bridge_getlink+0x870/0x870 [ 1711.476575][ T3577] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 1711.482060][ T3577] ? __copy_skb_header+0x270/0x5b0 [ 1711.487184][ T3577] ? skb_splice_bits+0x1a0/0x1a0 [ 1711.492111][ T3577] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1711.497901][ T3577] ? kmem_cache_alloc+0x261/0x740 [ 1711.503054][ T3577] netlink_rcv_skb+0x15a/0x410 [ 1711.507814][ T3577] ? rtnl_bridge_getlink+0x870/0x870 [ 1711.513092][ T3577] ? netlink_ack+0xa10/0xa10 [ 1711.517683][ T3577] netlink_unicast+0x537/0x740 [ 1711.522437][ T3577] ? netlink_attachskb+0x810/0x810 [ 1711.527537][ T3577] ? _copy_from_iter_full+0x25c/0x870 [ 1711.532907][ T3577] ? __phys_addr_symbol+0x2c/0x70 [ 1711.537915][ T3577] ? __check_object_size+0x171/0x437 [ 1711.543187][ T3577] netlink_sendmsg+0x882/0xe10 [ 1711.547941][ T3577] ? aa_af_perm+0x260/0x260 [ 1711.552441][ T3577] ? netlink_unicast+0x740/0x740 [ 1711.557384][ T3577] ? netlink_unicast+0x740/0x740 [ 1711.562336][ T3577] sock_sendmsg+0xcf/0x120 [ 1711.566759][ T3577] ____sys_sendmsg+0x6bf/0x7e0 [ 1711.571687][ T3577] ? kernel_sendmsg+0x50/0x50 [ 1711.576358][ T3577] ___sys_sendmsg+0x100/0x170 [ 1711.581024][ T3577] ? sendmsg_copy_msghdr+0x70/0x70 [ 1711.586139][ T3577] ? __fget_files+0x32f/0x500 [ 1711.590809][ T3577] ? ksys_dup3+0x3c0/0x3c0 [ 1711.595224][ T3577] ? __fget_light+0x20e/0x270 [ 1711.600088][ T3577] __sys_sendmsg+0xec/0x1b0 [ 1711.604589][ T3577] ? __sys_sendmsg_sock+0xb0/0xb0 [ 1711.610813][ T3577] ? __x64_sys_futex+0x380/0x4f0 [ 1711.615754][ T3577] ? trace_hardirqs_off_caller+0x55/0x230 [ 1711.621460][ T3577] ? do_syscall_64+0x21/0x7d0 [ 1711.626123][ T3577] do_syscall_64+0xf6/0x7d0 [ 1711.630633][ T3577] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1711.636508][ T3577] RIP: 0033:0x45c829 [ 1711.640398][ T3577] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1711.659982][ T3577] RSP: 002b:00007f1af5360c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.668391][ T3577] RAX: ffffffffffffffda RBX: 0000000000500ac0 RCX: 000000000045c829 [ 1711.676347][ T3577] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 1711.684302][ T3577] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1711.692457][ T3577] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1711.700412][ T3577] R13: 00000000000009fe R14: 00000000004ccb57 R15: 00007f1af53616d4 [ 1711.953125][ T3577] Mem-Info: [ 1711.956304][ T3577] active_anon:230676 inactive_anon:6176 isolated_anon:0 [ 1711.956304][ T3577] active_file:47 inactive_file:0 isolated_file:6 [ 1711.956304][ T3577] unevictable:0 dirty:14 writeback:2 unstable:0 [ 1711.956304][ T3577] slab_reclaimable:19321 slab_unreclaimable:157252 [ 1711.956304][ T3577] mapped:54574 shmem:6419 pagetables:4383 bounce:0 [ 1711.956304][ T3577] free:13636 free_pcp:344 free_cma:0 [ 1712.009422][ T3577] Node 0 active_anon:838988kB inactive_anon:16464kB active_file:12kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216436kB dirty:0kB writeback:8kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 280576kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1712.038805][ T3577] Node 1 active_anon:83716kB inactive_anon:8240kB active_file:68kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:1860kB dirty:56kB writeback:0kB shmem:8256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1712.103756][ T3577] Node 0 DMA free:10180kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.136403][ T3577] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1712.142366][ T3577] Node 0 DMA32 free:20636kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:836948kB inactive_anon:16464kB active_file:12kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11280kB pagetables:13784kB bounce:0kB free_pcp:300kB local_pcp:52kB free_cma:0kB [ 1712.174534][ T3577] lowmem_reserve[]: 0 0 0 0 0 [ 1712.179237][ T3577] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1712.211607][ T3577] lowmem_reserve[]: 0 0 0 0 0 [ 1712.217857][ T3577] Node 1 Normal free:26548kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:83716kB inactive_anon:8240kB active_file:172kB inactive_file:40kB unevictable:0kB writepending:56kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:1584kB pagetables:3748kB bounce:0kB free_pcp:884kB local_pcp:584kB free_cma:0kB [ 1712.327732][ T3577] lowmem_reserve[]: 0 0 0 0 0 [ 1712.352752][ T3577] Node 0 DMA: 9*4kB (UME) 48*8kB (UME) 44*16kB (UME) 27*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10308kB [ 1712.382438][ T3577] Node 0 DMA32: 409*4kB (UME) 211*8kB (UE) 43*16kB (UME) 15*32kB (UME) 842*64kB (UM) 127*128kB (UM) 24*256kB (UM) 3*512kB (U) 0*1024kB 1*2048kB (M) 0*4096kB = 84364kB [ 1712.409080][ T3577] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1712.427899][ T3577] Node 1 Normal: 1199*4kB (UME) 697*8kB (UME) 409*16kB (M) 44*32kB (UME) 84*64kB (UM) 4*128kB (UM) 0*256kB 1*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 26772kB [ 1712.925094][ T3577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.949277][ T3577] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.958589][ T3577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.976464][ T3577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1712.986190][ T3577] 6782 total pagecache pages [ 1712.996961][ T3577] 0 pages in swap cache [ 1713.001408][ T3577] Swap cache stats: add 0, delete 0, find 0/0 [ 1713.007669][ T3577] Free swap = 0kB [ 1713.020924][ T3577] Total swap = 0kB [ 1713.026143][ T3577] 1965979 pages RAM [ 1713.059697][ T3577] 0 pages HighMem/MovableOnly [ 1713.064406][ T3577] 349380 pages reserved [ 1713.068564][ T3577] 0 pages cma reserved [ 1713.084409][ T3577] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=24185,uid=0 [ 1713.140734][ T3577] Out of memory: Killed process 24185 (syz-executor.2) total-vm:75236kB, anon-rss:2220kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 17:42:11 executing program 2: set_mempolicy(0x1, &(0x7f00000000c0)=0x4c28b9dc, 0x10001) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x110001, 0x41) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:11 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:11 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "28f8871791e2af848e0bb2c252526b7341cf02fc021efdfb49368430e339dba5"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b='\xb0\x80s\xe8\xd4N\x91\xe3\xda\x92,\"C\x82D\xbb\x88\\i\xe2i\xc8\xe9\xd85\xb1\x14):M\xdcn'}]}, 0xbc}, 0x1, 0x0, 0x0, 0x814}, 0x44001) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:11 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x5c, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:11 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000040)={{0x2, 0x0, @reserved="9ca3015135699357c54b1cc6f33cf0c17e1450be031c0b97ddeffa05ea6b4d5f"}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x73060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:11 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:12 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x100c2, 0x0) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000100)={0x6, 0x6, 0x4, 0x2000000, 0x5, {r3, r4/1000+60000}, {0x5, 0x1, 0x3e, 0x3, 0x2, 0x5, "edd6d548"}, 0xc0, 0x1, @userptr=0xff, 0xf6d, 0x0, r5}) 17:42:12 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:12 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7ff, 0x3030c1) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) write$binfmt_elf32(r2, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x40, 0x2, 0x2, 0x80000000, 0x2, 0x3e, 0x0, 0x223, 0x38, 0x3c5, 0x6, 0x6, 0x20, 0x2, 0x1ff, 0xff, 0xfffd}, [{0x5, 0x9, 0x20, 0xb47, 0x400, 0x4, 0x3, 0x9}], "d61e42a6d3d67f28faf0590f3ac686512cd99a18e171e3d2e9c3988e40ce5f12218bcf626313f553140060755d27ab84f5de1e63e42f81d01eb1eb835936ab296a21ca1a4208f813d84290435bbdc11f4678d91524747d80ba51adfa99fe0e180d089874d22b4332dc2de04bdbee5ecbfff7023603da65c6", [[], [], []]}, 0x3d0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000100)) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000001c0)={0x2, 'veth0_macvtap\x00', {0x401}, 0x9}) r4 = dup(r3) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x83c}, 0x1, 0x0, 0x0, 0x20008801}, 0x4008001) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000180)=0x4, 0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:12 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r1, 0x7002) 17:42:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x74000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:12 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000200)={'broute\x00', 0x0, 0x3, 0xeb, [], 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)=""/235}, &(0x7f0000000080)=0x78) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$can_j1939(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}, 0xfc}, 0x18, &(0x7f0000000480)={&(0x7f0000000380)="871110cd18271998a888526fc676e8e21de3f9ad4bd77ec4c24cb2c21b5b8d0a218d6635a907d3d0f97ed646cb2e02838160bca8eab5d287a844cfd47a43a5964fefe37792f42159e73b49820a6749314eb3fdcca5bb221ee28c710ce160f5fa4ac4db6c92e78361c2444237106f1f325d0b08643b7eded128ffb8baa4fbc316cd3bf80401061ea812c974947c355eab270245b3dc674e183aa7f8e6b4438350eff0264cc43891ccd5f05d3ee2bd47fc58e04eb71c01fdd2521283565d07462b1853f64b750d4006251c51ec85042d4b37bf1ff448d76af81e922b287abc966f79d8d87e8ffe", 0xe6}, 0x1, 0x0, 0x0, 0x80}, 0x400c0c0) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x400440, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000040)) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000080)={0x990a6e, 0x5d, [], @string=&(0x7f0000000040)=0x1}}) 17:42:12 executing program 0: set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1715.407292][ T3647] warn_alloc: 8 callbacks suppressed [ 1715.407313][ T3647] syz-executor.4: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1715.514965][ T3647] CPU: 0 PID: 3647 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1715.523582][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1715.533648][ T3647] Call Trace: [ 1715.536956][ T3647] dump_stack+0x188/0x20d [ 1715.541273][ T3647] warn_alloc.cold+0x87/0x164 [ 1715.545963][ T3647] ? zone_watermark_ok_safe+0x260/0x260 [ 1715.551491][ T3647] ? ___might_sleep+0x15a/0x2b0 [ 1715.556339][ T3647] ? __alloc_pages_direct_compact+0x366/0x420 [ 1715.562575][ T3647] ? get_page_from_freelist+0x3580/0x3580 [ 1715.568366][ T3647] ? __isolate_free_page+0x610/0x610 [ 1715.573642][ T3647] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1715.580216][ T3647] ? get_page_from_freelist+0x1767/0x3580 [ 1715.585931][ T3647] ? warn_alloc+0x110/0x110 [ 1715.590424][ T3647] ? __isolate_free_page+0x610/0x610 [ 1715.595702][ T3647] __alloc_pages_nodemask+0x5d9/0x810 [ 1715.601064][ T3647] ? mutex_trylock+0x2c0/0x2c0 [ 1715.605813][ T3647] ? preempt_schedule_irq+0xee/0x150 [ 1715.611095][ T3647] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1715.617853][ T3647] ? ion_page_pool_alloc+0x2c/0x280 [ 1715.623031][ T3647] ? wait_for_completion+0x270/0x270 [ 1715.628300][ T3647] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1715.634827][ T3647] alloc_pages_current+0xff/0x200 [ 1715.639842][ T3647] ion_page_pool_alloc+0x186/0x280 [ 1715.644946][ T3647] ion_system_heap_allocate+0x321/0xb00 [ 1715.650479][ T3647] ? ion_system_heap_free+0x240/0x240 [ 1715.655829][ T3647] ? kfree+0x1eb/0x2b0 [ 1715.660586][ T3647] ? ion_ioctl+0x9da/0xca0 [ 1715.664994][ T3647] ? lockdep_hardirqs_on+0x463/0x620 [ 1715.670274][ T3647] ion_ioctl+0x37a/0xca0 [ 1715.674518][ T3647] ? _ion_buffer_destroy+0xa0/0xa0 [ 1715.679623][ T3647] ? ksys_dup3+0x3c0/0x3c0 [ 1715.684194][ T3647] ? __x64_sys_futex+0x380/0x4f0 [ 1715.689121][ T3647] ? _ion_buffer_destroy+0xa0/0xa0 [ 1715.694214][ T3647] ksys_ioctl+0x11a/0x180 [ 1715.698533][ T3647] __x64_sys_ioctl+0x6f/0xb0 [ 1715.703122][ T3647] ? lockdep_hardirqs_on+0x463/0x620 [ 1715.708476][ T3647] do_syscall_64+0xf6/0x7d0 [ 1715.712975][ T3647] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1715.718846][ T3647] RIP: 0033:0x45c829 [ 1715.722729][ T3647] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1715.742312][ T3647] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.750702][ T3647] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1715.758741][ T3647] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1715.766694][ T3647] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1715.774645][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1715.782617][ T3647] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:42:13 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:13 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) 17:42:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x74060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:13 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2c}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x9, 0xf20, "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", 0xb0, 0x0, 0x7f, 0x80, 0xee, 0x6, 0x7}, r5}}, 0x120) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r6 = msgget$private(0x0, 0x80) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000100)=""/248) 17:42:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="10002cbd7000fddb6d79df250200000005000400d178d5020200"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x404c884) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={'hsr0\x00', {0x2, 0x4e22, @remote}}) r4 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x0, 0x42) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000280)={0x9f0000, 0x6d, 0x3f, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x98090e, 0x3ff, [], @ptr=0x1f}}) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(r5, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000009c0)=0xe8) sendmsg$can_raw(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x1d, r7}, 0x10, &(0x7f0000000ac0)={&(0x7f0000000a40)=@canfd={{0x1}, 0x26, 0x2, 0x0, 0x0, "d458af00cdf52c02eece137398c71680d6493b0271dbb923353cb1d8bcde506ad3dac3c2153a8e3d1506c31d3f53017b251149fecf1a82a850a2508c0622e980"}, 0x48}}, 0x20000000) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1717.107863][ T3647] Mem-Info: [ 1717.111881][ T3647] active_anon:230268 inactive_anon:6176 isolated_anon:0 [ 1717.111881][ T3647] active_file:118 inactive_file:90 isolated_file:32 [ 1717.111881][ T3647] unevictable:0 dirty:29 writeback:13 unstable:0 [ 1717.111881][ T3647] slab_reclaimable:19246 slab_unreclaimable:157684 [ 1717.111881][ T3647] mapped:54745 shmem:6419 pagetables:4409 bounce:0 [ 1717.111881][ T3647] free:24871 free_pcp:0 free_cma:0 [ 1717.170667][ T1143] oom_reaper: reaped process 3670 (syz-executor.3), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 1717.191747][ T3647] Node 0 active_anon:836896kB inactive_anon:16460kB active_file:44kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216544kB dirty:92kB writeback:40kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 278528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1717.246196][ T3647] Node 0 DMA free:10256kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.254924][ T3683] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1717.297464][ T3647] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1717.341947][ T3647] Node 0 DMA32 free:32584kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:834856kB inactive_anon:16460kB active_file:148kB inactive_file:100kB unevictable:0kB writepending:232kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11280kB pagetables:13664kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 1717.467605][ T3647] lowmem_reserve[]: 0 0 0 0 0 [ 1717.468533][ T3683] CPU: 1 PID: 3683 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1717.480791][ T3647] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1717.480922][ T3683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1717.518994][ T3683] Call Trace: [ 1717.522303][ T3683] dump_stack+0x188/0x20d [ 1717.526655][ T3683] dump_header+0x10b/0x826 [ 1717.531093][ T3683] oom_kill_process.cold+0x10/0x15 [ 1717.536238][ T3683] out_of_memory+0x31f/0x12f0 [ 1717.540934][ T3683] ? oom_killer_disable+0x270/0x270 [ 1717.546146][ T3683] ? mutex_trylock+0x246/0x2c0 [ 1717.550921][ T3683] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1717.558138][ T3683] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1717.560085][ T3647] lowmem_reserve[]: 0 0 0 0 0 [ 1717.564750][ T3683] ? warn_alloc+0x110/0x110 [ 1717.564787][ T3683] __alloc_pages_nodemask+0x5d9/0x810 [ 1717.579300][ T3683] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1717.586078][ T3683] ? print_usage_bug+0x240/0x240 [ 1717.586772][ T3647] Node 0 DMA: 9*4kB (UME) 48*8kB (UME) 44*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10276kB [ 1717.591034][ T3683] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1717.591055][ T3683] alloc_pages_vma+0xd9/0x600 [ 1717.591076][ T3683] wp_page_copy+0x20b/0x16a0 [ 1717.591095][ T3683] ? do_wp_page+0x590/0x1440 [ 1717.617068][ T3647] Node 0 DMA32: 728*4kB (ME) 232*8kB (UME) 48*16kB (UME) 25*32kB (ME) 15*64kB (M) 16*128kB (UM) 28*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 20608kB [ 1717.619669][ T3683] ? follow_pfn+0x250/0x250 [ 1717.619690][ T3683] ? lock_downgrade+0x840/0x840 [ 1717.619705][ T3683] ? vm_normal_page+0x14d/0x380 [ 1717.619722][ T3683] ? __handle_mm_fault+0x189c/0x3c90 [ 1717.619743][ T3683] do_wp_page+0x598/0x1440 [ 1717.624415][ T3647] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1717.628890][ T3683] ? finish_mkwrite_fault+0x5b0/0x5b0 [ 1717.628904][ T3683] ? rwlock_bug.part.0+0x90/0x90 [ 1717.628919][ T3683] ? fault_around_bytes_set+0x90/0x90 [ 1717.628941][ T3683] __handle_mm_fault+0x2381/0x3c90 [ 1717.628963][ T3683] ? vm_insert_pages+0x6a0/0x6a0 [ 1717.645637][ T3647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.649992][ T3683] ? count_memcg_event_mm+0x1e2/0x3d0 [ 1717.650025][ T3683] ? mark_held_locks+0x9f/0xe0 [ 1717.650055][ T3683] handle_mm_fault+0x1a5/0x660 [ 1717.654955][ T3647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.659714][ T3683] do_page_fault+0x55b/0x13da [ 1717.659744][ T3683] page_fault+0x39/0x40 [ 1717.659815][ T3683] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1717.659833][ T3683] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1717.665178][ T3647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1717.669476][ T3683] RSP: 0018:ffffc90003d97b40 EFLAGS: 00010206 [ 1717.669489][ T3683] RAX: 0000000000000001 RBX: 000000000073b058 RCX: 0000000000000005 [ 1717.669499][ T3683] RDX: 0000000000000000 RSI: ffffc90003d97bd0 RDI: 000000000073b058 [ 1717.669509][ T3683] RBP: ffffc90003d97bd0 R08: 0000000000006f6c R09: fffff520007b2f7f [ 1717.669518][ T3683] R10: ffffc90003d97bf7 R11: fffff520007b2f7e R12: 0000000000000028 [ 1717.669527][ T3683] R13: 000000000073b080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1717.669562][ T3683] _copy_to_user+0x11e/0x160 [ 1717.681009][ T3647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1717.686349][ T3683] inet_gifconf+0x23c/0x490 [ 1717.686371][ T3683] ? inet_set_link_af+0x3f0/0x3f0 [ 1717.691401][ T3647] 6643 total pagecache pages [ 1717.696667][ T3683] ? inet_set_link_af+0x3f0/0x3f0 [ 1717.696732][ T3683] dev_ifconf+0xd3/0x230 [ 1717.701907][ T3647] 0 pages in swap cache [ 1717.706724][ T3683] sock_do_ioctl+0x260/0x2f0 [ 1717.706742][ T3683] ? compat_ifr_data_ioctl+0x160/0x160 [ 1717.706798][ T3683] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1717.716382][ T3647] Swap cache stats: add 0, delete 0, find 0/0 [ 1717.721630][ T3683] ? do_vfs_ioctl+0x50c/0x1360 [ 1717.721652][ T3683] ? ioctl_file_clone+0x180/0x180 [ 1717.721674][ T3683] sock_ioctl+0x3ec/0x790 [ 1717.721694][ T3683] ? dlci_ioctl_set+0x30/0x30 [ 1717.726498][ T3647] Free swap = 0kB [ 1717.731187][ T3683] ? ksys_dup3+0x3c0/0x3c0 [ 1717.731206][ T3683] ? __x64_sys_futex+0x380/0x4f0 [ 1717.731230][ T3683] ? dlci_ioctl_set+0x30/0x30 [ 1717.731249][ T3683] ksys_ioctl+0x11a/0x180 [ 1717.740599][ T3647] Total swap = 0kB [ 1717.745157][ T3683] __x64_sys_ioctl+0x6f/0xb0 [ 1717.745174][ T3683] ? lockdep_hardirqs_on+0x463/0x620 [ 1717.745196][ T3683] do_syscall_64+0xf6/0x7d0 [ 1717.749417][ T3647] 1965979 pages RAM [ 1717.755640][ T3683] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1717.755654][ T3683] RIP: 0033:0x45c829 [ 1717.755675][ T3683] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1717.775400][ T3647] 0 pages HighMem/MovableOnly [ 1717.784769][ T3683] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1717.784784][ T3683] RAX: ffffffffffffffda RBX: 00000000004e8f00 RCX: 000000000045c829 [ 1717.784793][ T3683] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000005 [ 1717.784803][ T3683] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1717.784811][ T3683] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1717.784820][ T3683] R13: 000000000000040f R14: 00000000004c6afa R15: 00007f20a92856d4 [ 1718.060595][ T3647] 349380 pages reserved [ 1718.064773][ T3647] 0 pages cma reserved [ 1718.486648][ T3683] Mem-Info: [ 1718.490882][ T3683] active_anon:230258 inactive_anon:6176 isolated_anon:0 [ 1718.490882][ T3683] active_file:20 inactive_file:0 isolated_file:19 [ 1718.490882][ T3683] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1718.490882][ T3683] slab_reclaimable:19244 slab_unreclaimable:157421 [ 1718.490882][ T3683] mapped:54602 shmem:6419 pagetables:4409 bounce:0 [ 1718.490882][ T3683] free:13902 free_pcp:61 free_cma:0 [ 1718.529779][ T3683] Node 0 active_anon:836884kB inactive_anon:16460kB active_file:4kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216452kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 278528kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1718.560414][ T3683] Node 0 DMA free:10164kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.593095][ T3683] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1718.599222][ T3683] Node 0 DMA32 free:17868kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:834844kB inactive_anon:16460kB active_file:4kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11280kB pagetables:13664kB bounce:0kB free_pcp:260kB local_pcp:16kB free_cma:0kB [ 1718.632620][ T3683] lowmem_reserve[]: 0 0 0 0 0 [ 1718.637547][ T3683] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1718.667174][ T3683] lowmem_reserve[]: 0 0 0 0 0 [ 1718.673432][ T3683] Node 0 DMA: 9*4kB (UME) 34*8kB (UME) 44*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10164kB [ 1718.690857][ T3683] Node 0 DMA32: 638*4kB (ME) 240*8kB (UME) 50*16kB (UME) 24*32kB (ME) 16*64kB (UM) 14*128kB (M) 17*256kB (UM) 3*512kB (M) 1*1024kB (M) 1*2048kB (M) 0*4096kB = 17816kB [ 1718.767405][ T3683] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1718.816990][ T3683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.845494][ T3683] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1718.876361][ T3683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1718.907085][ T3683] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1718.934638][ T3683] 6743 total pagecache pages [ 1718.947323][ T3683] 0 pages in swap cache [ 1718.960895][ T3683] Swap cache stats: add 0, delete 0, find 0/0 [ 1718.973930][ T3683] Free swap = 0kB [ 1718.983469][ T3683] Total swap = 0kB [ 1718.998148][ T3683] 1965979 pages RAM [ 1719.010626][ T3683] 0 pages HighMem/MovableOnly [ 1719.026762][ T3683] 349380 pages reserved [ 1719.041571][ T3683] 0 pages cma reserved [ 1719.054157][ T3683] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.0,pid=22295,uid=0 [ 1719.152406][ T3683] Out of memory: Killed process 22295 (syz-executor.0) total-vm:74840kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1719.241183][ T1143] oom_reaper: reaped process 22295 (syz-executor.0), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1719.300783][ T1143] oom_reaper: reaped process 3647 (syz-executor.4), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 1719.400402][ T1143] oom_reaper: reaped process 3651 (syz-executor.0), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 1719.467420][ T1143] oom_reaper: reaped process 3688 (syz-executor.2), now anon-rss:0kB, file-rss:34628kB, shmem-rss:0kB [ 1719.518616][ T1143] oom_reaper: reaped process 3683 (syz-executor.1), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 17:42:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x75060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) socket$inet6(0xa, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000080)=0x1ff) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x214800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:18 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000300)={0x7f, "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"}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="cc0000f0", @ANYRES16=r4, @ANYBLOB="000228bd7000fedbdf250100000008000600cb010000740003800800030003000000140002006e72300000000000000000000000000001000400000100001400060020010000000000000000000000000002080001000100000014000600fe8000000000000000000000000000f714000600fe88000000000000000000000000000108000100020000002400028006000b00020000000800040081000000080008005f8f000008000800d700000008000500050000000800050006000000080006001f000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x24000001) 17:42:18 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2c}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x9, 0xf20, "1872e28f37b90c5316cd140cf9dceb08e7337aa19aad5f2445872be3c359941eb25d1b94486ee155d89488c09e63126703a75f05a2a6ae77e053475ceef06587ad6ada28b1349c17db39f42e2509593057b7ccc78529204e00ae0b4621eb3f61eb2cb8f57ab91506195d787bb29d519663b48a2fb523dae53d823dbf49d97138dae93d7b32fc69af264c2f83cc3a7922c87e5a570c014175ae08c92a1c5ab0da93dc713f3f358c813e1587622e12a66c104cb08db6f34e9bb07abbd728a17e70a5f9849de25f1b341c65ab20594c51f60ac2e558faa46675c96c0895a2f67a533f5e4906ecd13c379bed2c46f8c414ad48a8d25ac43b2049d6bbdc6f6cbebc77", 0xb0, 0x0, 0x7f, 0x80, 0xee, 0x6, 0x7}, r5}}, 0x120) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r6 = msgget$private(0x0, 0x80) msgctl$IPC_INFO(r6, 0x3, &(0x7f0000000100)=""/248) 17:42:18 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fdatasync(r1) 17:42:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x76060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:20 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r3) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 2: set_mempolicy(0x4000, &(0x7f00000000c0)=0x7f, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r4, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r4, 0xecf}, &(0x7f0000000080)=0x8) 17:42:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x77060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:21 executing program 0: close(0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r1, 0x2, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xffffffff}, @in6={0xa, 0x4e23, 0x3705, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffff81}}}, 0x118) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x80, 0x800) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f000001d0c0)={0x0, 0x0, &(0x7f000001d080)={&(0x7f0000000400)=ANY=[@ANYBLOB="01040047", @ANYRES16=r5, @ANYBLOB="0907000000000000000001000000"], 0x14}}, 0x0) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r5, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x1}}]}, 0x30}}, 0x4000) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x500, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x82000, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e21, @rand_addr=0x64010102}}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x8c, 0x7a}, {0x81}, 0x9, 0x6, 0x38}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x7ff, 0x10, 0x0, r3, 0x3000000}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x0, 'hsr0\x00', {0x3}, 0x3}) 17:42:21 executing program 3: set_mempolicy(0x1, &(0x7f0000000040)=0x3, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="14c6c292c120f6cfc26e91e9240109967c3fc9f242f1f370e018fb839e0800e2aca8b297e76c5a876da5b47d8b67597b6805000000000000003beca46aba0e114ee072daf3acd7a6f4544139626c34c8aa8c1205b295c59523f7b075f835e938f0875befb5f4e849633068c289779c35e1795db0c3fa39fbfbf8688cc3b8d8b640d9bbd8bf7c797f52e5eb87ab7f47a02e2c0c79f8626b299e5a9b1afc6e095c24f0ed3f9d80ab7bca5964785c80ffae20f086c1fd00001560cca7ee0c860dc53d194fae51e635000000040000000000", @ANYRESOCT, @ANYBLOB="0100000000000000000018000000"], 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000003980)={&(0x7f0000003900)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="000425bd7000fbdbdf25020000002c000680040002000800010009000000040002000800010008000000080001000000001015000100010100000c00038008000200060000001800068008000100000200000400020008000100070000001c000380080002000400000008000300050000000800030001000000"], 0x80}, 0x1, 0x0, 0x0, 0x4010}, 0x48804) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010105, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) lookup_dcookie(0xff, &(0x7f0000000040)=""/90, 0x5a) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000200)='net/icmp6\x00') ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f0000000300)={0x9, 0x2, 0x1000, "113557fadbb6c7d8eb0cbef1b8e76cddcdaa2670236f3c2238ed1c9e68b275b363269dafb02c0a5da5c607aa952440531798e28576341c36e3937e64", 0x8, "774384a905343ae045a32215db84d3ed7b909d477dc9062482e9b50e7eca4617688f775e33f0d040601d55d7fce97a163183da970c4b7bb84f60cc5a", 0x20}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0180000000000000000018000000"], 0x14}, 0x1, 0x4800}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r6, 0x502, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40008000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x0, [], [{0x0, 0x9, 0x40, 0x1, 0x0, 0x3}, {0x91bb, 0x9, 0x2, 0xfff, 0x1f, 0x8}], [[], []]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:21 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)) ioctl$KVM_SET_ONE_REG(r3, 0x4010aeac, &(0x7f0000000040)={0x8, 0x5}) 17:42:22 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x10050005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:22 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000008}) [ 1724.573013][ T3755] 8021q: VLANs not supported on hsr0 17:42:22 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000004}) 17:42:22 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3003f00}) [ 1727.690292][ T1143] oom_reaper: reaped process 3777 (syz-executor.4), now anon-rss:0kB, file-rss:34752kB, shmem-rss:0kB 17:42:26 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500}) 17:42:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x78000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:42:26 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="fbf825312aaee5021de88d2963a7fbcd7cc5f02d384c3734b907a4028b106be9fa86f95ff535c813ba8ac11048954c5c9ce065c284ead4c7a115fbeaf6b92b8bae299be6e6b3a1b10afaab1e6c5a290c3956eec576d9f2414b27df0473f690cc9d2ff4f10ce2dab00f5cc9e9b12ad9a22fda9af9e369224bfd1eb40eedb989df87fecc219cf307e514d94336753e1132e4974187e6", 0x95) [ 1728.991980][ T3786] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1729.063902][ T3786] CPU: 1 PID: 3786 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1729.072553][ T3786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1729.082644][ T3786] Call Trace: [ 1729.085962][ T3786] dump_stack+0x188/0x20d [ 1729.090349][ T3786] dump_header+0x10b/0x826 [ 1729.094791][ T3786] oom_kill_process.cold+0x10/0x15 [ 1729.099923][ T3786] out_of_memory+0x31f/0x12f0 [ 1729.104622][ T3786] ? oom_killer_disable+0x270/0x270 [ 1729.109840][ T3786] ? mutex_trylock+0x246/0x2c0 [ 1729.114619][ T3786] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1729.121399][ T3786] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1729.128014][ T3786] ? stack_trace_consume_entry+0x157/0x160 [ 1729.133853][ T3786] ? warn_alloc+0x110/0x110 [ 1729.138379][ T3786] ? do_syscall_64+0xf6/0x7d0 [ 1729.143089][ T3786] __alloc_pages_nodemask+0x5d9/0x810 [ 1729.148480][ T3786] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1729.155258][ T3786] ? mark_lock+0x12b/0xf10 [ 1729.159699][ T3786] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1729.166133][ T3786] alloc_pages_current+0xff/0x200 [ 1729.171177][ T3786] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1729.177170][ T3786] __get_free_pages+0x8/0x40 [ 1729.181814][ T3786] sg_kmalloc+0x52/0x70 [ 1729.185984][ T3786] __sg_alloc_table+0x244/0x380 [ 1729.190873][ T3786] sg_alloc_table+0x2e/0x80 [ 1729.195383][ T3786] ? sgl_alloc+0x30/0x30 [ 1729.199633][ T3786] ion_system_heap_allocate+0x588/0xb00 [ 1729.205190][ T3786] ? ion_system_heap_free+0x240/0x240 [ 1729.210570][ T3786] ? kfree+0x1eb/0x2b0 [ 1729.214657][ T3786] ? ion_ioctl+0x9da/0xca0 [ 1729.219108][ T3786] ? lockdep_hardirqs_on+0x463/0x620 [ 1729.224414][ T3786] ion_ioctl+0x37a/0xca0 [ 1729.228776][ T3786] ? _ion_buffer_destroy+0xa0/0xa0 [ 1729.233914][ T3786] ? ksys_dup3+0x3c0/0x3c0 [ 1729.238343][ T3786] ? __x64_sys_futex+0x380/0x4f0 [ 1729.243306][ T3786] ? _ion_buffer_destroy+0xa0/0xa0 [ 1729.248429][ T3786] ksys_ioctl+0x11a/0x180 [ 1729.252804][ T3786] __x64_sys_ioctl+0x6f/0xb0 [ 1729.257410][ T3786] ? lockdep_hardirqs_on+0x463/0x620 [ 1729.262712][ T3786] do_syscall_64+0xf6/0x7d0 [ 1729.267259][ T3786] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1729.273166][ T3786] RIP: 0033:0x45c829 [ 1729.277077][ T3786] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1729.296708][ T3786] RSP: 002b:00007fbdaeabec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1729.305120][ T3786] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1729.313183][ T3786] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1729.321319][ T3786] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1729.329399][ T3786] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1729.337386][ T3786] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaeabf6d4 17:42:27 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 17:42:27 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000004}) 17:42:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x78060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1730.088857][ T3786] Mem-Info: [ 1730.102301][ T3786] active_anon:223474 inactive_anon:6176 isolated_anon:0 [ 1730.102301][ T3786] active_file:427 inactive_file:11149 isolated_file:0 [ 1730.102301][ T3786] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1730.102301][ T3786] slab_reclaimable:19470 slab_unreclaimable:156878 [ 1730.102301][ T3786] mapped:58616 shmem:6419 pagetables:4359 bounce:0 [ 1730.102301][ T3786] free:112498 free_pcp:435 free_cma:0 [ 1730.252121][ T3786] Node 0 active_anon:834472kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216452kB dirty:8kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 276480kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1730.410871][ T3786] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.573592][ T3786] lowmem_reserve[]: 0 2517 2517 2517 2517 17:42:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x79060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1730.593418][ T3786] Node 0 DMA32 free:22996kB min:35932kB low:44912kB high:53892kB reserved_highatomic:4096KB active_anon:832420kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11120kB pagetables:13364kB bounce:0kB free_pcp:1784kB local_pcp:1288kB free_cma:0kB [ 1730.683130][ T3786] lowmem_reserve[]: 0 0 0 0 0 [ 1730.696272][ T3786] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1730.793694][ T3786] lowmem_reserve[]: 0 0 0 0 0 [ 1730.813319][ T3786] Node 0 DMA: 9*4kB (ME) 40*8kB (UME) 44*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10212kB [ 1730.873123][ T3786] Node 0 DMA32: 417*4kB (UME) 688*8kB (UME) 66*16kB (UME) 20*32kB (UME) 23*64kB (UM) 18*128kB (UM) 11*256kB (UM) 4*512kB (M) 5*1024kB (UM) 1*2048kB (M) 0*4096kB = 24676kB [ 1730.938775][ T3786] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1730.985097][ T3786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.023193][ T3786] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.075634][ T3786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1731.099687][ T3786] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1731.139205][ T3786] 11885 total pagecache pages [ 1731.150652][ T3786] 0 pages in swap cache [ 1731.165261][ T3786] Swap cache stats: add 0, delete 0, find 0/0 [ 1731.183213][ T3786] Free swap = 0kB [ 1731.192890][ T3786] Total swap = 0kB [ 1731.203834][ T3786] 1965979 pages RAM [ 1731.213310][ T3786] 0 pages HighMem/MovableOnly [ 1731.225398][ T3786] 349380 pages reserved [ 1731.236591][ T3786] 0 pages cma reserved [ 1731.247527][ T3786] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.4,pid=22159,uid=0 [ 1731.293658][ T3786] Out of memory: Killed process 22159 (syz-executor.4) total-vm:74972kB, anon-rss:2216kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 17:42:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7a000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1731.342780][ T1143] oom_reaper: reaped process 22159 (syz-executor.4), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 17:42:29 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000004}) 17:42:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0xffff8000, 0xffffffffffffffff, 0x3000000}) 17:42:29 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000006}) 17:42:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1731.548225][ T3813] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1731.589535][ T3813] CPU: 0 PID: 3813 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1731.598148][ T3813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1731.608211][ T3813] Call Trace: [ 1731.611519][ T3813] dump_stack+0x188/0x20d [ 1731.615863][ T3813] dump_header+0x10b/0x826 [ 1731.620297][ T3813] oom_kill_process.cold+0x10/0x15 [ 1731.625424][ T3813] out_of_memory+0x31f/0x12f0 [ 1731.630125][ T3813] ? oom_killer_disable+0x270/0x270 [ 1731.635330][ T3813] ? mutex_trylock+0x246/0x2c0 [ 1731.640186][ T3813] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1731.647013][ T3813] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1731.653652][ T3813] ? stack_trace_consume_entry+0x157/0x160 [ 1731.659482][ T3813] ? warn_alloc+0x110/0x110 [ 1731.664005][ T3813] ? do_syscall_64+0xf6/0x7d0 [ 1731.668829][ T3813] __alloc_pages_nodemask+0x5d9/0x810 [ 1731.674246][ T3813] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1731.681010][ T3813] ? mark_lock+0x12b/0xf10 [ 1731.685455][ T3813] ? find_held_lock+0x2d/0x110 [ 1731.690242][ T3813] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1731.696668][ T3813] alloc_pages_current+0xff/0x200 [ 1731.701699][ T3813] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1731.707692][ T3813] __get_free_pages+0x8/0x40 [ 1731.712292][ T3813] sg_kmalloc+0x52/0x70 [ 1731.716554][ T3813] __sg_alloc_table+0x244/0x380 [ 1731.721423][ T3813] sg_alloc_table+0x2e/0x80 [ 1731.725931][ T3813] ? sgl_alloc+0x30/0x30 [ 1731.730187][ T3813] ion_system_heap_allocate+0x588/0xb00 [ 1731.735757][ T3813] ? ion_system_heap_free+0x240/0x240 [ 1731.741134][ T3813] ? kfree+0x1eb/0x2b0 [ 1731.745206][ T3813] ? ion_ioctl+0x9da/0xca0 [ 1731.749653][ T3813] ? lockdep_hardirqs_on+0x463/0x620 [ 1731.754945][ T3813] ion_ioctl+0x37a/0xca0 [ 1731.759209][ T3813] ? _ion_buffer_destroy+0xa0/0xa0 [ 1731.764341][ T3813] ? ksys_dup3+0x3c0/0x3c0 [ 1731.768777][ T3813] ? __x64_sys_futex+0x380/0x4f0 [ 1731.773744][ T3813] ? _ion_buffer_destroy+0xa0/0xa0 [ 1731.778871][ T3813] ksys_ioctl+0x11a/0x180 [ 1731.783253][ T3813] __x64_sys_ioctl+0x6f/0xb0 [ 1731.787855][ T3813] ? lockdep_hardirqs_on+0x463/0x620 [ 1731.793156][ T3813] do_syscall_64+0xf6/0x7d0 [ 1731.797677][ T3813] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1731.803576][ T3813] RIP: 0033:0x45c829 [ 1731.807475][ T3813] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1731.827075][ T3813] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1731.835490][ T3813] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1731.843466][ T3813] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1731.851448][ T3813] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1731.859426][ T3813] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1731.867405][ T3813] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:42:29 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="fbf825312aaee5021de88d2963a7fbcd7cc5f02d384c3734b907a4028b106be9fa86f95ff535c813ba8ac11048954c5c9ce065c284ead4c7a115fbeaf6b92b8bae299be6e6b3a1b10afaab1e6c5a290c3956eec576d9f2414b27df0473f690cc9d2ff4f10ce2dab00f5cc9e9b12ad9a22fda9af9e369224bfd1eb40eedb989df87fecc219cf307e514d94336753e1132e4974187e6", 0x95) 17:42:29 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0xffff8000, 0xffffffffffffffff, 0x3000000}) 17:42:29 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000040)=0x10001, 0x4d, 0x1) [ 1732.354535][ T3828] warn_alloc: 7 callbacks suppressed [ 1732.354554][ T3828] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 17:42:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7a030000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1732.462766][ T3828] CPU: 1 PID: 3828 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1732.471394][ T3828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1732.481456][ T3828] Call Trace: [ 1732.484765][ T3828] dump_stack+0x188/0x20d [ 1732.489112][ T3828] warn_alloc.cold+0x87/0x164 [ 1732.493804][ T3828] ? zone_watermark_ok_safe+0x260/0x260 [ 1732.499364][ T3828] ? ___might_sleep+0x15a/0x2b0 [ 1732.504258][ T3828] ? __alloc_pages_direct_compact+0x366/0x420 [ 1732.510354][ T3828] ? get_page_from_freelist+0x3580/0x3580 [ 1732.516095][ T3828] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1732.522694][ T3828] ? get_page_from_freelist+0x1767/0x3580 [ 1732.528520][ T3828] ? warn_alloc+0x110/0x110 [ 1732.533048][ T3828] ? __isolate_free_page+0x610/0x610 [ 1732.538347][ T3828] __alloc_pages_nodemask+0x5d9/0x810 [ 1732.543728][ T3828] ? mutex_trylock+0x2c0/0x2c0 [ 1732.548502][ T3828] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1732.555287][ T3828] ? mark_lock+0x12b/0xf10 [ 1732.559711][ T3828] ? wait_for_completion+0x270/0x270 [ 1732.565008][ T3828] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1732.571430][ T3828] alloc_pages_current+0xff/0x200 [ 1732.576465][ T3828] ion_page_pool_alloc+0x186/0x280 [ 1732.581615][ T3828] ion_system_heap_allocate+0x321/0xb00 [ 1732.587182][ T3828] ? ion_system_heap_free+0x240/0x240 [ 1732.592554][ T3828] ? kfree+0x1eb/0x2b0 [ 1732.596621][ T3828] ? ion_ioctl+0x9da/0xca0 [ 1732.601046][ T3828] ? lockdep_hardirqs_on+0x463/0x620 [ 1732.606702][ T3828] ion_ioctl+0x37a/0xca0 [ 1732.610957][ T3828] ? _ion_buffer_destroy+0xa0/0xa0 [ 1732.616111][ T3828] ? ksys_dup3+0x3c0/0x3c0 [ 1732.620530][ T3828] ? __x64_sys_futex+0x380/0x4f0 [ 1732.625478][ T3828] ? _ion_buffer_destroy+0xa0/0xa0 [ 1732.630589][ T3828] ksys_ioctl+0x11a/0x180 [ 1732.634950][ T3828] __x64_sys_ioctl+0x6f/0xb0 [ 1732.639543][ T3828] ? lockdep_hardirqs_on+0x463/0x620 [ 1732.644835][ T3828] do_syscall_64+0xf6/0x7d0 [ 1732.649353][ T3828] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1732.655242][ T3828] RIP: 0033:0x45c829 [ 1732.659138][ T3828] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1732.678754][ T3828] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.687181][ T3828] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1732.695135][ T3828] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1732.703102][ T3828] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 17:42:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1732.711057][ T3828] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1732.719019][ T3828] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 [ 1732.727567][ T3813] Mem-Info: [ 1732.733423][ T3813] active_anon:222907 inactive_anon:6176 isolated_anon:0 [ 1732.733423][ T3813] active_file:552 inactive_file:11065 isolated_file:0 [ 1732.733423][ T3813] unevictable:0 dirty:31 writeback:18 unstable:0 [ 1732.733423][ T3813] slab_reclaimable:19482 slab_unreclaimable:157568 17:42:30 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000003}) [ 1732.733423][ T3813] mapped:58630 shmem:6419 pagetables:4301 bounce:0 [ 1732.733423][ T3813] free:120009 free_pcp:402 free_cma:0 [ 1732.901845][ T3813] Node 0 active_anon:832244kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216464kB dirty:0kB writeback:8kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 274432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1732.970679][ T3813] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.057703][ T3813] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1733.082556][ T3813] Node 0 DMA32 free:35464kB min:35932kB low:44912kB high:53892kB reserved_highatomic:4096KB active_anon:830204kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11088kB pagetables:13260kB bounce:0kB free_pcp:1172kB local_pcp:396kB free_cma:0kB [ 1733.224851][ T3813] lowmem_reserve[]: 0 0 0 0 0 [ 1733.249666][ T3813] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1733.766432][ T3813] lowmem_reserve[]: 0 0 0 0 0 [ 1733.772819][ T3813] Node 0 DMA: 10*4kB (UME) 59*8kB (UME) 45*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10384kB [ 1733.797023][ T3813] Node 0 DMA32: 521*4kB (MEH) 275*8kB (MEH) 54*16kB (MEH) 536*32kB (UME) 34*64kB (UME) 17*128kB (UM) 11*256kB (UM) 4*512kB (UM) 16*1024kB (UM) 3*2048kB (M) 0*4096kB = 54044kB [ 1733.823909][ T3813] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1733.857732][ T3813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:42:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7a060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1733.879020][ T3813] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.901035][ T3813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:42:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1733.924567][ T3813] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1733.945068][ T3813] 11895 total pagecache pages [ 1733.956330][ T3813] 0 pages in swap cache [ 1733.965123][ T3813] Swap cache stats: add 0, delete 0, find 0/0 [ 1733.984130][ T3813] Free swap = 0kB [ 1733.994147][ T3813] Total swap = 0kB [ 1734.004267][ T3813] 1965979 pages RAM [ 1734.013815][ T3813] 0 pages HighMem/MovableOnly [ 1734.020324][ T3813] 349380 pages reserved [ 1734.024625][ T3813] 0 pages cma reserved [ 1734.037400][ T3813] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=13381,uid=0 [ 1734.057954][ T3813] Out of memory: Killed process 13381 (syz-executor.5) total-vm:74840kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1734.076296][ T3828] Mem-Info: [ 1734.080605][ T3828] active_anon:223458 inactive_anon:6176 isolated_anon:0 [ 1734.080605][ T3828] active_file:554 inactive_file:11066 isolated_file:0 [ 1734.080605][ T3828] unevictable:0 dirty:0 writeback:2 unstable:0 [ 1734.080605][ T3828] slab_reclaimable:19478 slab_unreclaimable:157967 [ 1734.080605][ T3828] mapped:58651 shmem:6419 pagetables:4326 bounce:0 [ 1734.080605][ T3828] free:201762 free_pcp:62 free_cma:0 [ 1734.140500][ T1143] oom_reaper: reaped process 3813 (syz-executor.4), now anon-rss:0kB, file-rss:34840kB, shmem-rss:0kB 17:42:32 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x6000000, 0xffffffffffffffff, 0x3000000}) [ 1734.279506][ T1143] oom_reaper: reaped process 3835 (syz-executor.2), now anon-rss:0kB, file-rss:34776kB, shmem-rss:0kB [ 1734.289771][ T3828] Node 0 active_anon:832260kB inactive_anon:16464kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216464kB dirty:0kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 274432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1734.388583][ T3846] syz-executor.4 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1734.414857][ T3828] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.453559][ T3846] CPU: 0 PID: 3846 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1734.462179][ T3846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1734.472249][ T3846] Call Trace: [ 1734.475560][ T3846] dump_stack+0x188/0x20d [ 1734.479908][ T3846] dump_header+0x10b/0x826 [ 1734.484339][ T3846] oom_kill_process.cold+0x10/0x15 [ 1734.489470][ T3846] out_of_memory+0x31f/0x12f0 [ 1734.494169][ T3846] ? oom_killer_disable+0x270/0x270 [ 1734.499382][ T3846] ? mutex_trylock+0x246/0x2c0 [ 1734.504243][ T3846] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1734.513284][ T3846] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1734.519918][ T3846] ? warn_alloc+0x110/0x110 [ 1734.524474][ T3846] __alloc_pages_nodemask+0x5d9/0x810 [ 1734.529863][ T3846] ? mutex_trylock+0x2c0/0x2c0 [ 1734.534650][ T3846] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1734.541430][ T3846] ? mark_lock+0x12b/0xf10 [ 1734.545858][ T3846] ? wait_for_completion+0x270/0x270 [ 1734.551157][ T3846] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1734.557599][ T3846] alloc_pages_current+0xff/0x200 [ 1734.562649][ T3846] ion_page_pool_alloc+0x186/0x280 [ 1734.567773][ T3846] ion_system_heap_allocate+0x321/0xb00 [ 1734.573332][ T3846] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1734.579157][ T3846] ? ion_system_heap_free+0x240/0x240 [ 1734.584539][ T3846] ? kfree+0x1eb/0x2b0 [ 1734.588617][ T3846] ? ion_ioctl+0x9da/0xca0 [ 1734.593040][ T3846] ? lockdep_hardirqs_on+0x463/0x620 [ 1734.598341][ T3846] ion_ioctl+0x37a/0xca0 [ 1734.602601][ T3846] ? _ion_buffer_destroy+0xa0/0xa0 [ 1734.607767][ T3846] ? ksys_dup3+0x3c0/0x3c0 [ 1734.612189][ T3846] ? __x64_sys_futex+0x380/0x4f0 [ 1734.617136][ T3846] ? _ion_buffer_destroy+0xa0/0xa0 [ 1734.622252][ T3846] ksys_ioctl+0x11a/0x180 [ 1734.626588][ T3846] __x64_sys_ioctl+0x6f/0xb0 [ 1734.631233][ T3846] ? lockdep_hardirqs_on+0x463/0x620 [ 1734.636536][ T3846] do_syscall_64+0xf6/0x7d0 [ 1734.641062][ T3846] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1734.646984][ T3846] RIP: 0033:0x45c829 [ 1734.650886][ T3846] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1734.670522][ T3846] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.678951][ T3846] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1734.686941][ T3846] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1734.694926][ T3846] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1734.702953][ T3846] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1734.710942][ T3846] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:42:32 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x8f7a, 0x1c1840) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40100, 0x25) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000040)) r7 = dup2(0xffffffffffffffff, r6) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x80000, r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000280)={r10}) write$6lowpan_enable(r3, &(0x7f00000001c0)='1', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000100)={0x10001, 0x1, 0x0, 'queue1\x00', 0x8}) [ 1734.811139][ T3828] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1734.826137][ T3828] Node 0 DMA32 free:17784kB min:35932kB low:44912kB high:53892kB reserved_highatomic:2048KB active_anon:830212kB inactive_anon:16464kB active_file:8kB inactive_file:8kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11088kB pagetables:13396kB bounce:0kB free_pcp:696kB local_pcp:372kB free_cma:0kB [ 1734.874543][ T3828] lowmem_reserve[]: 0 0 0 0 0 [ 1734.894427][ T3828] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.926599][ T3828] lowmem_reserve[]: 0 0 0 0 0 [ 1734.934280][ T3828] Node 0 DMA: 10*4kB (UME) 32*8kB (UME) 45*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10168kB [ 1734.954254][ T3828] Node 0 DMA32: 511*4kB (MEH) 269*8kB (MEH) 55*16kB (MEH) 19*32kB (ME) 17*64kB (ME) 16*128kB (MH) 11*256kB (MH) 4*512kB (MH) 2*1024kB (MH) 1*2048kB (M) 0*4096kB = 17780kB [ 1734.974534][ T3828] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1734.988828][ T3828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.000956][ T3828] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.122782][ T3828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1735.134288][ T3828] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1735.146138][ T3828] 11970 total pagecache pages [ 1735.152091][ T3828] 0 pages in swap cache [ 1735.157467][ T3828] Swap cache stats: add 0, delete 0, find 0/0 [ 1735.167181][ T3828] Free swap = 0kB 17:42:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7b060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1735.180256][ T3828] Total swap = 0kB [ 1735.190196][ T3828] 1965979 pages RAM [ 1735.222692][ T3828] 0 pages HighMem/MovableOnly [ 1735.258288][ T3828] 349380 pages reserved [ 1735.282820][ T3828] 0 pages cma reserved [ 1735.376123][ T3846] Mem-Info: [ 1735.391070][ T3846] active_anon:222942 inactive_anon:6176 isolated_anon:0 [ 1735.391070][ T3846] active_file:569 inactive_file:11377 isolated_file:0 [ 1735.391070][ T3846] unevictable:0 dirty:19 writeback:8 unstable:0 [ 1735.391070][ T3846] slab_reclaimable:19478 slab_unreclaimable:158674 [ 1735.391070][ T3846] mapped:58842 shmem:6419 pagetables:4331 bounce:0 [ 1735.391070][ T3846] free:187007 free_pcp:200 free_cma:0 [ 1735.542633][ T3846] Node 0 active_anon:832184kB inactive_anon:16460kB active_file:0kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216464kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 274432kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1735.644111][ T3846] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.719075][ T3846] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1735.734516][ T3846] Node 0 DMA32 free:17896kB min:35932kB low:44912kB high:53892kB reserved_highatomic:6144KB active_anon:830144kB inactive_anon:16460kB active_file:0kB inactive_file:16kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11088kB pagetables:13260kB bounce:0kB free_pcp:744kB local_pcp:392kB free_cma:0kB 17:42:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7c060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1735.842133][ T3846] lowmem_reserve[]: 0 0 0 0 0 [ 1735.861353][ T3846] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.962998][ T3846] lowmem_reserve[]: 0 0 0 0 0 [ 1735.973215][ T3846] Node 0 DMA: 10*4kB (UME) 32*8kB (UME) 45*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10168kB [ 1735.999383][ T3846] Node 0 DMA32: 521*4kB (MEH) 266*8kB (UMEH) 56*16kB (UMEH) 20*32kB (MEH) 28*64kB (UME) 16*128kB (UMH) 12*256kB (UMH) 4*512kB (UMH) 4*1024kB (UMH) 0*2048kB 0*4096kB = 18804kB [ 1736.026884][ T3846] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.046801][ T3846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.086080][ T3846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.112344][ T3846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.127121][ T3846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1736.179135][ T3846] 12251 total pagecache pages [ 1736.195395][ T3846] 0 pages in swap cache [ 1736.209384][ T3846] Swap cache stats: add 0, delete 0, find 0/0 [ 1736.230210][ T3846] Free swap = 0kB [ 1736.241702][ T3846] Total swap = 0kB [ 1736.254497][ T3846] 1965979 pages RAM [ 1736.267038][ T3846] 0 pages HighMem/MovableOnly [ 1736.283340][ T3846] 349380 pages reserved [ 1736.289820][ T3846] 0 pages cma reserved [ 1736.294146][ T3846] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.5,pid=11775,uid=0 [ 1736.311980][ T3846] Out of memory: Killed process 11775 (syz-executor.5) total-vm:74840kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1736.342048][ T1143] oom_reaper: reaped process 3846 (syz-executor.4), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB 17:42:34 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) times(&(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0xfffff82b, &(0x7f0000000080)=[r3]}, 0x1) [ 1736.408206][ T1143] oom_reaper: reaped process 3841 (syz-executor.3), now anon-rss:0kB, file-rss:34848kB, shmem-rss:0kB [ 1736.477015][ T1143] oom_reaper: reaped process 3828 (syz-executor.1), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB [ 1736.659305][ T3866] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1736.707803][ T3866] CPU: 1 PID: 3866 Comm: syz-executor.0 Not tainted 5.7.0-rc4-syzkaller #0 [ 1736.716421][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1736.726491][ T3866] Call Trace: [ 1736.729794][ T3866] dump_stack+0x188/0x20d [ 1736.734137][ T3866] dump_header+0x10b/0x826 [ 1736.738573][ T3866] oom_kill_process.cold+0x10/0x15 [ 1736.743703][ T3866] out_of_memory+0x31f/0x12f0 [ 1736.748396][ T3866] ? oom_killer_disable+0x270/0x270 [ 1736.753785][ T3866] ? mutex_trylock+0x246/0x2c0 [ 1736.758547][ T3866] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1736.765238][ T3866] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1736.771842][ T3866] ? stack_trace_consume_entry+0x157/0x160 [ 1736.777659][ T3866] ? warn_alloc+0x110/0x110 [ 1736.782173][ T3866] ? do_syscall_64+0xf6/0x7d0 [ 1736.786871][ T3866] __alloc_pages_nodemask+0x5d9/0x810 [ 1736.792248][ T3866] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1736.799013][ T3866] ? mark_lock+0x12b/0xf10 [ 1736.803433][ T3866] ? find_held_lock+0x2d/0x110 [ 1736.808236][ T3866] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1736.814672][ T3866] alloc_pages_current+0xff/0x200 [ 1736.819713][ T3866] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1736.825713][ T3866] __get_free_pages+0x8/0x40 [ 1736.830400][ T3866] sg_kmalloc+0x52/0x70 [ 1736.834561][ T3866] __sg_alloc_table+0x244/0x380 [ 1736.839429][ T3866] sg_alloc_table+0x2e/0x80 [ 1736.843949][ T3866] ? sgl_alloc+0x30/0x30 [ 1736.848207][ T3866] ion_system_heap_allocate+0x588/0xb00 [ 1736.853767][ T3866] ? ion_system_heap_free+0x240/0x240 [ 1736.859142][ T3866] ? kfree+0x1eb/0x2b0 [ 1736.863222][ T3866] ? ion_ioctl+0x9da/0xca0 [ 1736.867650][ T3866] ? lockdep_hardirqs_on+0x463/0x620 [ 1736.872954][ T3866] ion_ioctl+0x37a/0xca0 [ 1736.877211][ T3866] ? _ion_buffer_destroy+0xa0/0xa0 [ 1736.882345][ T3866] ? ksys_dup3+0x3c0/0x3c0 [ 1736.886791][ T3866] ? __x64_sys_futex+0x380/0x4f0 [ 1736.891770][ T3866] ? _ion_buffer_destroy+0xa0/0xa0 [ 1736.896903][ T3866] ksys_ioctl+0x11a/0x180 [ 1736.901245][ T3866] __x64_sys_ioctl+0x6f/0xb0 [ 1736.905855][ T3866] ? lockdep_hardirqs_on+0x463/0x620 [ 1736.911149][ T3866] do_syscall_64+0xf6/0x7d0 [ 1736.915669][ T3866] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1736.921712][ T3866] RIP: 0033:0x45c829 [ 1736.925617][ T3866] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1736.945427][ T3866] RSP: 002b:00007fe2c2713c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:42:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x6) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1736.953848][ T3866] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1736.961825][ T3866] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1736.969802][ T3866] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1736.977786][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1736.987326][ T3866] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fe2c27146d4 [ 1738.056572][ T3866] Mem-Info: [ 1738.066608][ T3866] active_anon:221802 inactive_anon:6176 isolated_anon:0 [ 1738.066608][ T3866] active_file:1044 inactive_file:10958 isolated_file:0 [ 1738.066608][ T3866] unevictable:0 dirty:0 writeback:0 unstable:0 [ 1738.066608][ T3866] slab_reclaimable:19459 slab_unreclaimable:158195 [ 1738.066608][ T3866] mapped:58806 shmem:6419 pagetables:4304 bounce:0 [ 1738.066608][ T3866] free:105921 free_pcp:319 free_cma:0 [ 1738.123160][ T3866] Node 0 active_anon:827856kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216480kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 270336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1738.166986][ T3866] Node 0 DMA free:10168kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.205897][ T3866] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1738.231689][ T3866] Node 0 DMA32 free:17856kB min:35932kB low:44912kB high:53892kB reserved_highatomic:6144KB active_anon:825816kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11088kB pagetables:13152kB bounce:0kB free_pcp:1528kB local_pcp:528kB free_cma:0kB [ 1738.352280][ T3866] lowmem_reserve[]: 0 0 0 0 0 [ 1738.367904][ T3866] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1738.427934][ T3866] lowmem_reserve[]: 0 0 0 0 0 [ 1738.439725][ T3866] Node 0 DMA: 10*4kB (UME) 32*8kB (UME) 45*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10168kB [ 1738.468862][ T3866] Node 0 DMA32: 522*4kB (UMEH) 266*8kB (UMEH) 55*16kB (MEH) 24*32kB (UMEH) 18*64kB (UME) 16*128kB (UMH) 11*256kB (MH) 4*512kB (UMH) 4*1024kB (UMH) 0*2048kB 0*4096kB = 18024kB [ 1738.488532][ T3866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1738.501303][ T3866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.512620][ T3866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.550583][ T3866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1738.580060][ T3866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1738.609918][ T3866] 12277 total pagecache pages [ 1738.623429][ T3866] 0 pages in swap cache [ 1738.636077][ T3866] Swap cache stats: add 0, delete 0, find 0/0 [ 1738.655507][ T3866] Free swap = 0kB [ 1738.667714][ T3866] Total swap = 0kB [ 1738.681783][ T3866] 1965979 pages RAM [ 1738.693300][ T3866] 0 pages HighMem/MovableOnly [ 1738.707801][ T3866] 349380 pages reserved [ 1738.707807][ T3866] 0 pages cma reserved [ 1738.707819][ T3866] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.1,pid=3515,uid=0 [ 1738.707910][ T3866] Out of memory: Killed process 3515 (syz-executor.1) total-vm:74840kB, anon-rss:2208kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 1738.768663][ T1143] oom_reaper: reaped process 3871 (syz-executor.3), now anon-rss:0kB, file-rss:34852kB, shmem-rss:0kB 17:42:36 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x16000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010005, 0xf, 0x0, r4, 0x3000000}) 17:42:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7d060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:36 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x8f7a, 0x1c1840) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40100, 0x25) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000040)) r7 = dup2(0xffffffffffffffff, r6) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000240)={0x0, 0x80000, r9}) ioctl$DRM_IOCTL_GEM_CLOSE(r7, 0x40086409, &(0x7f0000000280)={r10}) write$6lowpan_enable(r3, &(0x7f00000001c0)='1', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000100)={0x10001, 0x1, 0x0, 'queue1\x00', 0x8}) 17:42:36 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x24880) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) write$P9_RGETLOCK(r0, &(0x7f0000000180)={0x20, 0x37, 0x1, {0x0, 0x0, 0x5, r1, 0x2, 'y\x00'}}, 0x20) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) 17:42:36 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) times(&(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000100)={0xfffff82b, &(0x7f0000000080)=[r3]}, 0x1) [ 1739.264352][ T3881] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 17:42:37 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x8, 0x3f}, {0x4, 0x40}, 0xfffffff9, 0x0, 0x75}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1739.362176][ T3881] CPU: 0 PID: 3881 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1739.370782][ T3881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1739.381019][ T3881] Call Trace: [ 1739.384324][ T3881] dump_stack+0x188/0x20d [ 1739.388668][ T3881] dump_header+0x10b/0x826 [ 1739.393100][ T3881] oom_kill_process.cold+0x10/0x15 [ 1739.398222][ T3881] out_of_memory+0x31f/0x12f0 [ 1739.402942][ T3881] ? oom_killer_disable+0x270/0x270 [ 1739.408150][ T3881] ? mutex_trylock+0x246/0x2c0 [ 1739.412918][ T3881] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1739.419599][ T3881] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1739.426199][ T3881] ? stack_trace_consume_entry+0x157/0x160 [ 1739.432033][ T3881] ? warn_alloc+0x110/0x110 [ 1739.436553][ T3881] ? do_syscall_64+0xf6/0x7d0 [ 1739.441252][ T3881] __alloc_pages_nodemask+0x5d9/0x810 [ 1739.446643][ T3881] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1739.453444][ T3881] ? mark_lock+0x12b/0xf10 [ 1739.457863][ T3881] ? find_held_lock+0x2d/0x110 [ 1739.462649][ T3881] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1739.469075][ T3881] alloc_pages_current+0xff/0x200 [ 1739.474117][ T3881] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1739.480108][ T3881] __get_free_pages+0x8/0x40 [ 1739.484706][ T3881] sg_kmalloc+0x52/0x70 [ 1739.488873][ T3881] __sg_alloc_table+0x244/0x380 [ 1739.493740][ T3881] sg_alloc_table+0x2e/0x80 [ 1739.498968][ T3881] ? sgl_alloc+0x30/0x30 [ 1739.503220][ T3881] ion_system_heap_allocate+0x588/0xb00 [ 1739.508777][ T3881] ? ion_system_heap_free+0x240/0x240 [ 1739.514151][ T3881] ? kfree+0x1eb/0x2b0 [ 1739.518218][ T3881] ? ion_ioctl+0x9da/0xca0 [ 1739.522638][ T3881] ? lockdep_hardirqs_on+0x463/0x620 [ 1739.527956][ T3881] ion_ioctl+0x37a/0xca0 [ 1739.532300][ T3881] ? _ion_buffer_destroy+0xa0/0xa0 [ 1739.537784][ T3881] ? ksys_dup3+0x3c0/0x3c0 [ 1739.542217][ T3881] ? __x64_sys_futex+0x380/0x4f0 [ 1739.547182][ T3881] ? _ion_buffer_destroy+0xa0/0xa0 [ 1739.552300][ T3881] ksys_ioctl+0x11a/0x180 [ 1739.556643][ T3881] __x64_sys_ioctl+0x6f/0xb0 [ 1739.561242][ T3881] ? lockdep_hardirqs_on+0x463/0x620 [ 1739.566536][ T3881] do_syscall_64+0xf6/0x7d0 [ 1739.571056][ T3881] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1739.576949][ T3881] RIP: 0033:0x45c829 [ 1739.580937][ T3881] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1739.600549][ T3881] RSP: 002b:00007fbdaeabec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1739.608970][ T3881] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1739.616958][ T3881] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1739.624944][ T3881] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1739.632925][ T3881] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1739.640901][ T3881] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaeabf6d4 17:42:37 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x0, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) [ 1739.751997][ T3881] Mem-Info: [ 1739.759634][ T3881] active_anon:221346 inactive_anon:6176 isolated_anon:0 [ 1739.759634][ T3881] active_file:1076 inactive_file:10929 isolated_file:0 [ 1739.759634][ T3881] unevictable:0 dirty:11 writeback:0 unstable:0 [ 1739.759634][ T3881] slab_reclaimable:19455 slab_unreclaimable:158380 [ 1739.759634][ T3881] mapped:58873 shmem:6419 pagetables:4282 bounce:0 [ 1739.759634][ T3881] free:99021 free_pcp:258 free_cma:0 [ 1739.804827][ T3881] Node 0 active_anon:825692kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216480kB dirty:8kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 268288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1739.844175][ T3881] Node 0 DMA free:10180kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1739.894172][ T3881] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1739.930379][ T3881] Node 0 DMA32 free:20496kB min:35932kB low:44912kB high:53892kB reserved_highatomic:6144KB active_anon:823652kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10992kB pagetables:12948kB bounce:0kB free_pcp:1032kB local_pcp:488kB free_cma:0kB [ 1740.002496][ T3881] lowmem_reserve[]: 0 0 0 0 0 [ 1740.008792][ T3881] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:42:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x3000000, 0xffffffffffffffff, 0x3000000}) [ 1740.115309][ T3881] lowmem_reserve[]: 0 0 0 0 0 [ 1740.154850][ T3881] Node 0 DMA: 9*4kB (ME) 34*8kB (UME) 45*16kB (UME) 26*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 10180kB [ 1740.191538][ T3881] Node 0 DMA32: 522*4kB (UMEH) 662*8kB (UMEH) 72*16kB (UME) 28*32kB (UMEH) 15*64kB (UME) 15*128kB (MH) 12*256kB (UMH) 4*512kB (UMH) 4*1024kB (UMH) 0*2048kB 0*4096kB = 21528kB [ 1740.214423][ T3881] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1740.228428][ T3881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.245287][ T3881] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.257071][ T3881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1740.268554][ T3881] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1740.280911][ T3881] 12280 total pagecache pages [ 1740.285814][ T3881] 0 pages in swap cache [ 1740.292371][ T3881] Swap cache stats: add 0, delete 0, find 0/0 [ 1740.299973][ T3881] Free swap = 0kB [ 1740.303906][ T3881] Total swap = 0kB [ 1740.309956][ T3881] 1965979 pages RAM [ 1740.315174][ T3881] 0 pages HighMem/MovableOnly [ 1740.323281][ T3881] 349380 pages reserved [ 1740.329353][ T3881] 0 pages cma reserved [ 1740.333804][ T3881] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=24760,uid=0 [ 1740.351714][ T3881] Out of memory: Killed process 24760 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1740.392713][ T1143] oom_reaper: reaped process 3881 (syz-executor.2), now anon-rss:0kB, file-rss:34900kB, shmem-rss:0kB [ 1740.409251][ T3908] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1740.438497][ T3908] CPU: 0 PID: 3908 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1740.447132][ T3908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1740.457214][ T3908] Call Trace: [ 1740.460530][ T3908] dump_stack+0x188/0x20d [ 1740.464878][ T3908] dump_header+0x10b/0x826 [ 1740.469310][ T3908] oom_kill_process.cold+0x10/0x15 [ 1740.474439][ T3908] out_of_memory+0x31f/0x12f0 [ 1740.479137][ T3908] ? oom_killer_disable+0x270/0x270 [ 1740.484350][ T3908] ? mutex_trylock+0x246/0x2c0 [ 1740.489142][ T3908] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1740.495832][ T3908] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1740.502441][ T3908] ? stack_trace_consume_entry+0x157/0x160 [ 1740.508285][ T3908] ? warn_alloc+0x110/0x110 [ 1740.512809][ T3908] ? do_syscall_64+0xf6/0x7d0 [ 1740.517520][ T3908] __alloc_pages_nodemask+0x5d9/0x810 [ 1740.522902][ T3908] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1740.529677][ T3908] ? mark_lock+0x12b/0xf10 [ 1740.534103][ T3908] ? find_held_lock+0x2d/0x110 [ 1740.538892][ T3908] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1740.545323][ T3908] alloc_pages_current+0xff/0x200 [ 1740.550359][ T3908] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1740.556355][ T3908] __get_free_pages+0x8/0x40 [ 1740.560955][ T3908] sg_kmalloc+0x52/0x70 [ 1740.565126][ T3908] __sg_alloc_table+0x244/0x380 [ 1740.569996][ T3908] sg_alloc_table+0x2e/0x80 [ 1740.574511][ T3908] ? sgl_alloc+0x30/0x30 [ 1740.578766][ T3908] ion_system_heap_allocate+0x588/0xb00 [ 1740.584330][ T3908] ? ion_system_heap_free+0x240/0x240 [ 1740.589708][ T3908] ? kfree+0x1eb/0x2b0 [ 1740.593786][ T3908] ? ion_ioctl+0x9da/0xca0 [ 1740.598215][ T3908] ? lockdep_hardirqs_on+0x463/0x620 [ 1740.603519][ T3908] ion_ioctl+0x37a/0xca0 [ 1740.607785][ T3908] ? _ion_buffer_destroy+0xa0/0xa0 [ 1740.612925][ T3908] ? ksys_dup3+0x3c0/0x3c0 [ 1740.617391][ T3908] ? __x64_sys_futex+0x380/0x4f0 [ 1740.622349][ T3908] ? _ion_buffer_destroy+0xa0/0xa0 [ 1740.627471][ T3908] ksys_ioctl+0x11a/0x180 [ 1740.631817][ T3908] __x64_sys_ioctl+0x6f/0xb0 [ 1740.636430][ T3908] ? lockdep_hardirqs_on+0x463/0x620 [ 1740.641728][ T3908] do_syscall_64+0xf6/0x7d0 [ 1740.646248][ T3908] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1740.652143][ T3908] RIP: 0033:0x45c829 [ 1740.656080][ T3908] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1740.675778][ T3908] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1740.684203][ T3908] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1740.692182][ T3908] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1740.700164][ T3908] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1740.708147][ T3908] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1740.716132][ T3908] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 [ 1740.735913][ T3908] Mem-Info: [ 1740.745493][ T3908] active_anon:220798 inactive_anon:6176 isolated_anon:0 [ 1740.745493][ T3908] active_file:1082 inactive_file:10929 isolated_file:0 [ 1740.745493][ T3908] unevictable:0 dirty:4 writeback:0 unstable:0 [ 1740.745493][ T3908] slab_reclaimable:19452 slab_unreclaimable:158767 [ 1740.745493][ T3908] mapped:58871 shmem:6419 pagetables:4253 bounce:0 [ 1740.745493][ T3908] free:115629 free_pcp:412 free_cma:0 [ 1740.865711][ T3908] Node 0 active_anon:823508kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216480kB dirty:0kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 266240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 17:42:38 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x8000000, 0xffffffffffffffff, 0x3000000}) [ 1740.948053][ T3908] Node 0 DMA free:10180kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:42:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240), 0x0) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) [ 1741.024765][ T3908] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1741.035548][ T3908] Node 0 DMA32 free:24224kB min:35932kB low:44912kB high:53892kB reserved_highatomic:6144KB active_anon:821468kB inactive_anon:16460kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10992kB pagetables:12844kB bounce:0kB free_pcp:1768kB local_pcp:584kB free_cma:0kB [ 1741.079047][ T3908] lowmem_reserve[]: 0 0 0 0 0 [ 1741.083936][ T3908] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:42:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7e060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1741.223398][ T3908] lowmem_reserve[]: 0 0 0 0 0 17:42:39 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) recvmmsg(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000300)=""/169, 0xa9}], 0x3}, 0x401}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, &(0x7f0000000500)=""/42, 0x2a}, 0x5}, {{&(0x7f0000000540), 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/176, 0xb0}], 0x2, &(0x7f0000000740)=""/135, 0x87}, 0x2}], 0x3, 0x10120, &(0x7f00000008c0)) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000900)="d46430c63f20700cb39c0ad05113a0acbf0ae6099581105a8c8f3f6367fb43eaf87390c3fdcba1765fbaabee87601fd87236ae2d65da4cb22ad0fdb087d3e3b63aeda26aab0553537436bcde38ddeef32da083b15fd120c9276c554be3", 0x5d) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_UIE_OFF(r4, 0x7004) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:39 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$KDADDIO(r1, 0x4b34, 0x101) 17:42:39 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x16000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010005, 0xf, 0x0, r4, 0x3000000}) [ 1741.265034][ T3908] Node 0 DMA: 15*4kB (UME) 16*8kB (UME) 10*16kB (UME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10396kB 17:42:39 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x500, 0xffffffffffffffff, 0x3000000}) [ 1741.394037][ T3908] Node 0 DMA32: 522*4kB (UMEH) 734*8kB (UMEH) 93*16kB (UME) 45*32kB (UMEH) 23*64kB (UME) 15*128kB (MH) 12*256kB (UMH) 4*512kB (UMH) 4*1024kB (UMH) 1*2048kB (M) 0*4096kB = 25544kB [ 1741.496786][ T3908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1741.554469][ T3908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.592702][ T3908] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.631994][ T3908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1741.673285][ T3908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1741.710803][ T3908] 12265 total pagecache pages [ 1741.737659][ T3908] 0 pages in swap cache [ 1741.746802][ T3908] Swap cache stats: add 0, delete 0, find 0/0 [ 1741.764330][ T3908] Free swap = 0kB [ 1741.789075][ T3908] Total swap = 0kB [ 1741.794326][ T3908] 1965979 pages RAM [ 1741.800255][ T3908] 0 pages HighMem/MovableOnly [ 1741.811808][ T3908] 349380 pages reserved [ 1741.822804][ T3908] 0 pages cma reserved [ 1741.827174][ T3908] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23891,uid=0 [ 1741.852759][ T3908] Out of memory: Killed process 23891 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1741.912732][ T3933] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1741.977484][ T3933] CPU: 1 PID: 3933 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1741.986103][ T3933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1741.996166][ T3933] Call Trace: [ 1741.999497][ T3933] dump_stack+0x188/0x20d [ 1742.003948][ T3933] dump_header+0x10b/0x826 [ 1742.008373][ T3933] oom_kill_process.cold+0x10/0x15 [ 1742.013498][ T3933] out_of_memory+0x31f/0x12f0 [ 1742.018186][ T3933] ? oom_killer_disable+0x270/0x270 [ 1742.023394][ T3933] ? mutex_trylock+0x246/0x2c0 [ 1742.028158][ T3933] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1742.034842][ T3933] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1742.041481][ T3933] ? stack_trace_consume_entry+0x157/0x160 [ 1742.047328][ T3933] ? warn_alloc+0x110/0x110 [ 1742.051854][ T3933] ? do_syscall_64+0xf6/0x7d0 [ 1742.056557][ T3933] __alloc_pages_nodemask+0x5d9/0x810 [ 1742.061943][ T3933] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1742.068712][ T3933] ? mark_lock+0x12b/0xf10 [ 1742.073226][ T3933] ? find_held_lock+0x2d/0x110 [ 1742.078012][ T3933] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1742.084555][ T3933] alloc_pages_current+0xff/0x200 [ 1742.089596][ T3933] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1742.095687][ T3933] __get_free_pages+0x8/0x40 [ 1742.100286][ T3933] sg_kmalloc+0x52/0x70 [ 1742.104452][ T3933] __sg_alloc_table+0x244/0x380 [ 1742.109329][ T3933] sg_alloc_table+0x2e/0x80 [ 1742.113843][ T3933] ? sgl_alloc+0x30/0x30 [ 1742.118107][ T3933] ion_system_heap_allocate+0x588/0xb00 [ 1742.123673][ T3933] ? ion_system_heap_free+0x240/0x240 [ 1742.129054][ T3933] ? kfree+0x1eb/0x2b0 [ 1742.133134][ T3933] ? ion_ioctl+0x9da/0xca0 [ 1742.137560][ T3933] ? lockdep_hardirqs_on+0x463/0x620 [ 1742.142885][ T3933] ion_ioctl+0x37a/0xca0 [ 1742.147150][ T3933] ? _ion_buffer_destroy+0xa0/0xa0 [ 1742.152291][ T3933] ? ksys_dup3+0x3c0/0x3c0 [ 1742.156722][ T3933] ? __x64_sys_futex+0x380/0x4f0 [ 1742.161692][ T3933] ? _ion_buffer_destroy+0xa0/0xa0 [ 1742.166813][ T3933] ksys_ioctl+0x11a/0x180 [ 1742.171158][ T3933] __x64_sys_ioctl+0x6f/0xb0 [ 1742.175763][ T3933] ? lockdep_hardirqs_on+0x463/0x620 [ 1742.181148][ T3933] do_syscall_64+0xf6/0x7d0 [ 1742.185672][ T3933] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1742.191576][ T3933] RIP: 0033:0x45c829 [ 1742.195478][ T3933] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1742.215086][ T3933] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.223526][ T3933] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1742.231505][ T3933] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.239505][ T3933] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1742.247503][ T3933] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1742.255480][ T3933] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:42:40 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x300, 0xffffffffffffffff, 0x3000000}) 17:42:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) prctl$PR_GET_NO_NEW_PRIVS(0x27) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x16000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x10010005, 0xf, 0x0, r4, 0x3000000}) 17:42:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x7f060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:40 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:40 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) [ 1742.560898][ T3942] warn_alloc: 5 callbacks suppressed [ 1742.560919][ T3942] syz-executor.4: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1742.659850][ T3942] CPU: 0 PID: 3942 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1742.668464][ T3942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1742.681938][ T3942] Call Trace: [ 1742.685255][ T3942] dump_stack+0x188/0x20d [ 1742.689602][ T3942] warn_alloc.cold+0x87/0x164 [ 1742.694297][ T3942] ? zone_watermark_ok_safe+0x260/0x260 [ 1742.699858][ T3942] ? ___might_sleep+0x15a/0x2b0 [ 1742.704723][ T3942] ? __alloc_pages_direct_compact+0x366/0x420 [ 1742.710803][ T3942] ? get_page_from_freelist+0x3580/0x3580 [ 1742.716980][ T3942] ? __isolate_free_page+0x610/0x610 [ 1742.722285][ T3942] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1742.728885][ T3942] ? get_page_from_freelist+0x1767/0x3580 [ 1742.735418][ T3942] ? warn_alloc+0x110/0x110 [ 1742.739946][ T3942] ? __isolate_free_page+0x610/0x610 [ 1742.745279][ T3942] __alloc_pages_nodemask+0x5d9/0x810 [ 1742.750703][ T3942] ? mutex_trylock+0x2c0/0x2c0 [ 1742.755480][ T3942] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1742.762258][ T3942] ? preempt_schedule_irq+0xee/0x150 [ 1742.767564][ T3942] ? wait_for_completion+0x270/0x270 [ 1742.772874][ T3942] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1742.779310][ T3942] alloc_pages_current+0xff/0x200 [ 1742.787495][ T3942] ion_page_pool_alloc+0x186/0x280 [ 1742.792631][ T3942] ion_system_heap_allocate+0x321/0xb00 [ 1742.798201][ T3942] ? ion_system_heap_free+0x240/0x240 [ 1742.803587][ T3942] ? kfree+0x1eb/0x2b0 [ 1742.807685][ T3942] ? ion_ioctl+0x9da/0xca0 [ 1742.812112][ T3942] ? lockdep_hardirqs_on+0x463/0x620 [ 1742.817411][ T3942] ion_ioctl+0x37a/0xca0 [ 1742.821685][ T3942] ? _ion_buffer_destroy+0xa0/0xa0 [ 1742.826845][ T3942] ? ksys_dup3+0x3c0/0x3c0 [ 1742.831270][ T3942] ? __x64_sys_futex+0x380/0x4f0 [ 1742.836237][ T3942] ? _ion_buffer_destroy+0xa0/0xa0 [ 1742.841377][ T3942] ksys_ioctl+0x11a/0x180 [ 1742.845732][ T3942] __x64_sys_ioctl+0x6f/0xb0 [ 1742.850431][ T3942] ? lockdep_hardirqs_on+0x463/0x620 [ 1742.855925][ T3942] do_syscall_64+0xf6/0x7d0 [ 1742.860540][ T3942] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1742.866433][ T3942] RIP: 0033:0x45c829 [ 1742.870347][ T3942] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1742.890406][ T3942] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1742.898835][ T3942] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1742.907084][ T3942] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1742.915080][ T3942] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1742.923061][ T3942] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1742.931040][ T3942] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:42:40 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x5000000, 0xffffffffffffffff, 0x3000000}) [ 1743.415764][ T3933] Mem-Info: [ 1743.429751][ T3933] active_anon:220256 inactive_anon:6176 isolated_anon:0 [ 1743.429751][ T3933] active_file:1190 inactive_file:6880 isolated_file:47 [ 1743.429751][ T3933] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1743.429751][ T3933] slab_reclaimable:19453 slab_unreclaimable:158878 [ 1743.429751][ T3933] mapped:58913 shmem:6419 pagetables:4190 bounce:0 [ 1743.429751][ T3933] free:27165 free_pcp:0 free_cma:0 [ 1743.555739][ T3942] Mem-Info: [ 1743.565668][ T3942] active_anon:220279 inactive_anon:6176 isolated_anon:0 [ 1743.565668][ T3942] active_file:1377 inactive_file:5023 isolated_file:32 [ 1743.565668][ T3942] unevictable:0 dirty:22 writeback:0 unstable:0 [ 1743.565668][ T3942] slab_reclaimable:19460 slab_unreclaimable:158886 [ 1743.565668][ T3942] mapped:58917 shmem:6419 pagetables:4227 bounce:0 [ 1743.565668][ T3942] free:28302 free_pcp:60 free_cma:0 [ 1743.621104][ T3933] Node 0 active_anon:821532kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216492kB dirty:8kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 264192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1743.666829][ T3942] Node 0 active_anon:821532kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216492kB dirty:8kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 264192kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1743.705142][ T3933] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.839135][ T3942] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2060kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1743.885269][ T3933] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1743.911395][ T3933] Node 0 DMA32 free:39852kB min:40028kB low:49008kB high:57988kB reserved_highatomic:0KB active_anon:819472kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11024kB pagetables:13036kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1743.953890][ T3933] lowmem_reserve[]: 0 0 0 0 0 [ 1743.996655][ T3933] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.016748][ T3942] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1744.094290][ T3942] Node 0 DMA32 free:39588kB min:40028kB low:49008kB high:57988kB reserved_highatomic:0KB active_anon:819472kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11024kB pagetables:13036kB bounce:0kB free_pcp:432kB local_pcp:0kB free_cma:0kB [ 1744.178706][ T3933] lowmem_reserve[]: 0 0 0 0 0 [ 1744.197651][ T3933] Node 0 DMA: 14*4kB (UME) 13*8kB (ME) 5*16kB (ME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10288kB [ 1744.246110][ T3942] lowmem_reserve[]: 0 0 0 0 0 [ 1744.256131][ T3933] Node 0 DMA32: 687*4kB (MEH) 314*8kB (UME) 124*16kB (UME) 88*32kB (UME) 19*64kB (UME) 16*128kB (UM) 13*256kB (UM) 45*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 39692kB [ 1744.273876][ T3942] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1744.304127][ T3933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.335764][ T3933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.346714][ T3942] lowmem_reserve[]: 0 0 0 0 0 [ 1744.357337][ T3942] Node 0 DMA: 14*4kB (UME) 13*8kB (ME) 5*16kB (ME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10288kB [ 1744.380341][ T3933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.442170][ T3933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.446508][ T3942] Node 0 DMA32: 561*4kB (MEH) 278*8kB (ME) 55*16kB (UME) 19*32kB (ME) 46*64kB (UME) 64*128kB (UM) 26*256kB (UM) 51*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 49860kB [ 1744.501298][ T3933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.560412][ T3933] 7415 total pagecache pages [ 1744.574748][ T3933] 0 pages in swap cache [ 1744.590426][ T3933] Swap cache stats: add 0, delete 0, find 0/0 [ 1744.603080][ T3942] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.611620][ T3933] Free swap = 0kB [ 1744.666065][ T3933] Total swap = 0kB [ 1744.678837][ T3942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.694108][ T3933] 1965979 pages RAM [ 1744.711177][ T3933] 0 pages HighMem/MovableOnly 17:42:42 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x5000000, 0xffffffffffffffff, 0x3000000}) 17:42:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x80060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1744.729492][ T3942] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.742360][ T3933] 349380 pages reserved [ 1744.762028][ T3933] 0 pages cma reserved [ 1744.787598][ T3933] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23872,uid=0 [ 1744.795803][ T3942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB 17:42:42 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0xff00, 0xffffffffffffffff, 0x3000000}) [ 1744.864895][ T3933] Out of memory: Killed process 23872 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1744.886294][ T3942] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1744.953988][ T3942] 8128 total pagecache pages [ 1744.973318][ T3942] 0 pages in swap cache [ 1744.984606][ T3942] Swap cache stats: add 0, delete 0, find 0/0 [ 1745.005050][ T3942] Free swap = 0kB [ 1745.013519][ T3942] Total swap = 0kB [ 1745.033478][ T3942] 1965979 pages RAM [ 1745.049893][ T3942] 0 pages HighMem/MovableOnly [ 1745.064280][ T3942] 349380 pages reserved [ 1745.095428][ T3942] 0 pages cma reserved [ 1745.208029][ T1143] oom_reaper: reaped process 3942 (syz-executor.4), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 1745.373091][ T3961] syz-executor.5 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1745.414535][ T3961] CPU: 0 PID: 3961 Comm: syz-executor.5 Not tainted 5.7.0-rc4-syzkaller #0 [ 1745.423158][ T3961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1745.433216][ T3961] Call Trace: [ 1745.436547][ T3961] dump_stack+0x188/0x20d [ 1745.440893][ T3961] dump_header+0x10b/0x826 [ 1745.445330][ T3961] oom_kill_process.cold+0x10/0x15 [ 1745.450457][ T3961] out_of_memory+0x31f/0x12f0 [ 1745.455164][ T3961] ? oom_killer_disable+0x270/0x270 [ 1745.460376][ T3961] ? mutex_trylock+0x246/0x2c0 [ 1745.465229][ T3961] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1745.471911][ T3961] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1745.478614][ T3961] ? warn_alloc+0x110/0x110 [ 1745.483140][ T3961] __alloc_pages_nodemask+0x5d9/0x810 [ 1745.488522][ T3961] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1745.495282][ T3961] ? xas_load+0x66/0x140 [ 1745.499540][ T3961] ? find_get_entry+0x426/0x730 [ 1745.504408][ T3961] ? __lock_page_or_retry+0xfb0/0xfb0 [ 1745.509808][ T3961] alloc_pages_current+0xff/0x200 [ 1745.514844][ T3961] __page_cache_alloc+0x298/0x480 [ 1745.519875][ T3961] pagecache_get_page+0x27f/0xa10 [ 1745.525084][ T3961] filemap_fault+0xfca/0x2ed0 [ 1745.529884][ T3961] ? lock_downgrade+0x840/0x840 [ 1745.534759][ T3961] ? read_cache_page_gfp+0x30/0x30 [ 1745.539890][ T3961] ? down_read+0x110/0x420 [ 1745.544321][ T3961] ? down_read_killable+0x460/0x460 [ 1745.549540][ T3961] ? lock_downgrade+0x840/0x840 [ 1745.554397][ T3961] ext4_filemap_fault+0x87/0xb6 [ 1745.559252][ T3961] __do_fault+0x10d/0x520 [ 1745.563595][ T3961] __handle_mm_fault+0x28a7/0x3c90 [ 1745.568719][ T3961] ? vm_insert_pages+0x6a0/0x6a0 [ 1745.573657][ T3961] ? count_memcg_event_mm+0x1e2/0x3d0 [ 1745.579041][ T3961] ? mark_held_locks+0x9f/0xe0 [ 1745.583822][ T3961] handle_mm_fault+0x1a5/0x660 [ 1745.588615][ T3961] do_page_fault+0x55b/0x13da [ 1745.593311][ T3961] page_fault+0x39/0x40 [ 1745.597467][ T3961] RIP: 0033:0x40f8d8 [ 1745.601370][ T3961] Code: Bad RIP value. [ 1745.605442][ T3961] RSP: 002b:0000000000c9fbf0 EFLAGS: 00010206 [ 1745.611511][ T3961] RAX: 0000000000000000 RBX: 00000000001aa33e RCX: 000000000045ad51 [ 1745.619481][ T3961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1745.627457][ T3961] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1745.635429][ T3961] R10: 0000000000c9fcd0 R11: 0000000000000000 R12: 000000000078bf00 [ 1745.643415][ T3961] R13: 000000000078c900 R14: ffffffffffffffff R15: 000000000078bf0c [ 1745.751271][ T3961] Mem-Info: [ 1745.754450][ T3961] active_anon:220414 inactive_anon:6176 isolated_anon:0 [ 1745.754450][ T3961] active_file:13 inactive_file:23 isolated_file:0 [ 1745.754450][ T3961] unevictable:0 dirty:4 writeback:1 unstable:0 [ 1745.754450][ T3961] slab_reclaimable:19406 slab_unreclaimable:159279 [ 1745.754450][ T3961] mapped:54648 shmem:6419 pagetables:4148 bounce:0 [ 1745.754450][ T3961] free:24453 free_pcp:150 free_cma:0 [ 1745.805898][ T3961] Node 0 active_anon:819208kB inactive_anon:16460kB active_file:0kB inactive_file:68kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216492kB dirty:8kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 262144kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1746.029555][ T3961] Node 1 active_anon:62448kB inactive_anon:8244kB active_file:80kB inactive_file:16kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2100kB dirty:8kB writeback:4kB shmem:8260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1746.064888][ T3961] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.107626][ T3961] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1746.146683][ T3961] Node 0 DMA32 free:45712kB min:40028kB low:49008kB high:57988kB reserved_highatomic:0KB active_anon:817168kB inactive_anon:16460kB active_file:1944kB inactive_file:2108kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10992kB pagetables:12740kB bounce:0kB free_pcp:480kB local_pcp:200kB free_cma:0kB [ 1746.271562][ T3961] lowmem_reserve[]: 0 0 0 0 0 [ 1746.284177][ T3961] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.321800][ T3961] lowmem_reserve[]: 0 0 0 0 0 [ 1746.345360][ T3961] Node 1 Normal free:54036kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:62448kB inactive_anon:8244kB active_file:12kB inactive_file:16kB unevictable:0kB writepending:12kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:1616kB pagetables:3852kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.385739][ T3961] lowmem_reserve[]: 0 0 0 0 0 [ 1746.390750][ T3961] Node 0 DMA: 9*4kB (ME) 13*8kB (ME) 6*16kB (UME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10284kB [ 1746.415113][ T3961] Node 0 DMA32: 650*4kB (UME) 299*8kB (UME) 60*16kB (ME) 22*32kB (UME) 9*64kB (ME) 19*128kB (UM) 23*256kB (UM) 18*512kB (UM) 0*1024kB 1*2048kB (M) 0*4096kB = 26816kB [ 1746.439022][ T3961] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1746.455784][ T3961] Node 1 Normal: 465*4kB (ME) 268*8kB (ME) 85*16kB (UME) 67*32kB (UME) 18*64kB (ME) 25*128kB (UME) 18*256kB (UME) 33*512kB (UME) 8*1024kB (UM) 4*2048kB (M) 1*4096kB (M) = 53844kB [ 1746.487365][ T3961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.503694][ T3961] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.514354][ T3961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1746.531040][ T3961] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1746.543153][ T3961] 6488 total pagecache pages [ 1746.551982][ T3961] 0 pages in swap cache [ 1746.556150][ T3961] Swap cache stats: add 0, delete 0, find 0/0 [ 1746.564407][ T3961] Free swap = 0kB [ 1746.572287][ T3961] Total swap = 0kB [ 1746.576028][ T3961] 1965979 pages RAM [ 1746.582251][ T3961] 0 pages HighMem/MovableOnly [ 1746.586955][ T3961] 349380 pages reserved [ 1746.595777][ T3961] 0 pages cma reserved [ 1746.602803][ T3961] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23301,uid=0 [ 1746.625053][ T3961] Out of memory: Killed process 23301 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 17:42:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:46 executing program 1: syslog(0x4, &(0x7f0000000100)=""/201, 0xc9) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, 0x2, {0x0, 0x0, 0x4, 0x21}}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080)=0x30, 0x4) 17:42:46 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x3000000, 0xffffffffffffffff, 0x3000000}) 17:42:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x81000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:46 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x3000000}) 17:42:46 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x404440, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000240)=0x1) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000380)={0x7f09}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @private=0xa010102}, 0x100, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)='veth0_to_bridge\x00', 0x0, 0x2, 0xb05}) mq_notify(r1, &(0x7f0000000200)={0x0, 0xb, 0x4, @thr={&(0x7f0000000080)="018ae9f46cccccacaad348775c6e94da2d7a2840edcea7f08022abcb58", &(0x7f0000000100)="57728a6f17799c2be29b2f0785a20ef7c7ad9c3146cf776806110c8382e49fd1f64ddf6d7986fbcfdae9594d138e59d619aa0d433447d169c65093b5cdad0d6dd4b7f8215eebaa88baeeca3f3ba5ed8e96a27efe1ab2162dbde44825dd3586ca3fb919d9baa96f9e7232ca8d68bad320f890ac79a3cbe80a48fb6d0fe981df569ddcf127547a447113bea79df74bab70915cdb862c00016bd2a814028d04ea4f93279f9f734a7d91a6ba78912679f66a079084014901d9f32da322efb3ba1b7f73a8989d55e4419edf8c382ce47dec93e763422a201f894869c5fdc40ffba1b5eb047d4d"}}) 17:42:46 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x4000, 0xffffffffffffffff, 0x3000000}) 17:42:46 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3000000}) 17:42:46 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3000000}) 17:42:46 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3000000}) 17:42:47 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x3000000}) 17:42:47 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000100)={0x2, @capture={0x1000, 0x0, {0x0, 0x6}, 0x6}}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x1, 0x3, 0x7, 0x4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:47 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3000000}) 17:42:47 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x1, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="40c71f7b244582b96ddf8706d0", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3}, 0x8) 17:42:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x81060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:47 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1750.516627][ T4007] syz-executor.1 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1750.606589][ T4007] CPU: 0 PID: 4007 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1750.615209][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1750.625648][ T4007] Call Trace: [ 1750.628954][ T4007] dump_stack+0x188/0x20d [ 1750.633304][ T4007] dump_header+0x10b/0x826 [ 1750.637739][ T4007] oom_kill_process.cold+0x10/0x15 [ 1750.642860][ T4007] out_of_memory+0x31f/0x12f0 [ 1750.647555][ T4007] ? oom_killer_disable+0x270/0x270 [ 1750.652772][ T4007] ? mutex_trylock+0x246/0x2c0 [ 1750.657541][ T4007] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1750.664227][ T4007] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1750.670842][ T4007] ? warn_alloc+0x110/0x110 [ 1750.675380][ T4007] __alloc_pages_nodemask+0x5d9/0x810 [ 1750.680787][ T4007] ? mutex_trylock+0x2c0/0x2c0 [ 1750.685583][ T4007] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1750.692357][ T4007] ? mark_lock+0x12b/0xf10 [ 1750.696780][ T4007] ? wait_for_completion+0x270/0x270 [ 1750.702161][ T4007] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1750.708586][ T4007] alloc_pages_current+0xff/0x200 [ 1750.713636][ T4007] ion_page_pool_alloc+0x186/0x280 [ 1750.718770][ T4007] ion_system_heap_allocate+0x321/0xb00 [ 1750.724339][ T4007] ? ion_system_heap_free+0x240/0x240 [ 1750.729727][ T4007] ? lockdep_hardirqs_on+0x463/0x620 [ 1750.735035][ T4007] ion_ioctl+0x37a/0xca0 [ 1750.739326][ T4007] ? _ion_buffer_destroy+0xa0/0xa0 [ 1750.744485][ T4007] ? ksys_dup3+0x3c0/0x3c0 [ 1750.748913][ T4007] ? __x64_sys_futex+0x380/0x4f0 [ 1750.753870][ T4007] ? _ion_buffer_destroy+0xa0/0xa0 [ 1750.758995][ T4007] ksys_ioctl+0x11a/0x180 [ 1750.763346][ T4007] __x64_sys_ioctl+0x6f/0xb0 [ 1750.768038][ T4007] ? lockdep_hardirqs_on+0x463/0x620 [ 1750.773331][ T4007] do_syscall_64+0xf6/0x7d0 [ 1750.777846][ T4007] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1750.783769][ T4007] RIP: 0033:0x45c829 [ 1750.787666][ T4007] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 17:42:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x82060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1750.807271][ T4007] RSP: 002b:00007f20a9263c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1750.815693][ T4007] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1750.823673][ T4007] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1750.832175][ T4007] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1750.840154][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1750.848138][ T4007] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92646d4 [ 1751.200497][ T4007] Mem-Info: [ 1751.204002][ T4007] active_anon:219970 inactive_anon:6176 isolated_anon:0 [ 1751.204002][ T4007] active_file:291 inactive_file:3046 isolated_file:2 [ 1751.204002][ T4007] unevictable:0 dirty:16 writeback:0 unstable:0 [ 1751.204002][ T4007] slab_reclaimable:19254 slab_unreclaimable:160393 [ 1751.204002][ T4007] mapped:57131 shmem:6419 pagetables:4141 bounce:0 [ 1751.204002][ T4007] free:100246 free_pcp:114 free_cma:0 [ 1751.244611][ T4007] Node 0 active_anon:817080kB inactive_anon:16460kB active_file:28kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):8kB mapped:216528kB dirty:4kB writeback:16kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 260096kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1751.274682][ T4007] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1751.305047][ T4007] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1751.312894][ T4007] Node 0 DMA32 free:37848kB min:37980kB low:46960kB high:55940kB reserved_highatomic:0KB active_anon:815040kB inactive_anon:16460kB active_file:28kB inactive_file:4kB unevictable:0kB writepending:20kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:11000kB pagetables:12692kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 1751.345402][ T4007] lowmem_reserve[]: 0 0 0 0 0 [ 1751.351149][ T4007] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:42:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x83060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1751.446105][ T4007] lowmem_reserve[]: 0 0 0 0 0 [ 1751.455717][ T4007] Node 0 DMA: 12*4kB (UME) 13*8kB (ME) 6*16kB (UME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10296kB [ 1751.515156][ T4007] Node 0 DMA32: 889*4kB (UME) 353*8kB (UME) 72*16kB (UME) 277*32kB (UME) 25*64kB (ME) 21*128kB (M) 12*256kB (M) 17*512kB (UM) 3*1024kB (U) 1*2048kB (M) 0*4096kB = 37580kB [ 1751.584659][ T4007] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1751.626516][ T4007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1751.666977][ T4007] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.701548][ T4007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1751.734162][ T4007] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1751.775398][ T4007] 9810 total pagecache pages [ 1751.793196][ T4007] 0 pages in swap cache [ 1751.810346][ T4007] Swap cache stats: add 0, delete 0, find 0/0 [ 1751.834920][ T4007] Free swap = 0kB [ 1751.848258][ T4007] Total swap = 0kB [ 1751.864510][ T4007] 1965979 pages RAM [ 1751.898368][ T4007] 0 pages HighMem/MovableOnly [ 1751.911267][ T4007] 349380 pages reserved [ 1751.917880][ T4007] 0 pages cma reserved [ 1751.923414][ T4007] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23288,uid=0 [ 1751.989725][ T4007] Out of memory: Killed process 23288 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1752.045789][ T1143] oom_reaper: reaped process 23288 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB [ 1752.130657][ T1143] oom_reaper: reaped process 4005 (syz-executor.4), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB [ 1752.194351][ T1143] oom_reaper: reaped process 4014 (syz-executor.3), now anon-rss:0kB, file-rss:34772kB, shmem-rss:0kB 17:42:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x84060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1752.260201][ T1143] oom_reaper: reaped process 4000 (syz-executor.2), now anon-rss:0kB, file-rss:34768kB, shmem-rss:0kB [ 1752.335908][ T1143] oom_reaper: reaped process 4007 (syz-executor.1), now anon-rss:0kB, file-rss:34792kB, shmem-rss:0kB 17:42:50 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x3000000}) [ 1753.152248][ T4042] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1753.211816][ T4042] CPU: 0 PID: 4042 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1753.220452][ T4042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1753.230527][ T4042] Call Trace: [ 1753.233846][ T4042] dump_stack+0x188/0x20d [ 1753.238199][ T4042] dump_header+0x10b/0x826 [ 1753.242627][ T4042] oom_kill_process.cold+0x10/0x15 [ 1753.247751][ T4042] out_of_memory+0x31f/0x12f0 [ 1753.252444][ T4042] ? oom_killer_disable+0x270/0x270 [ 1753.257654][ T4042] ? mutex_trylock+0x246/0x2c0 [ 1753.262420][ T4042] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1753.269102][ T4042] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1753.275721][ T4042] ? stack_trace_consume_entry+0x157/0x160 [ 1753.281551][ T4042] ? warn_alloc+0x110/0x110 [ 1753.286078][ T4042] ? do_syscall_64+0xf6/0x7d0 [ 1753.290963][ T4042] __alloc_pages_nodemask+0x5d9/0x810 [ 1753.296353][ T4042] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1753.303121][ T4042] ? mark_lock+0x12b/0xf10 [ 1753.307547][ T4042] ? find_held_lock+0x2d/0x110 [ 1753.312331][ T4042] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1753.318761][ T4042] alloc_pages_current+0xff/0x200 [ 1753.323853][ T4042] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1753.329887][ T4042] __get_free_pages+0x8/0x40 [ 1753.334499][ T4042] sg_kmalloc+0x52/0x70 [ 1753.338667][ T4042] __sg_alloc_table+0x244/0x380 [ 1753.343539][ T4042] sg_alloc_table+0x2e/0x80 [ 1753.348055][ T4042] ? sgl_alloc+0x30/0x30 [ 1753.352313][ T4042] ion_system_heap_allocate+0x588/0xb00 [ 1753.357878][ T4042] ? ion_system_heap_free+0x240/0x240 [ 1753.363262][ T4042] ? kfree+0x1eb/0x2b0 [ 1753.367345][ T4042] ? ion_ioctl+0x9da/0xca0 [ 1753.371771][ T4042] ? lockdep_hardirqs_on+0x463/0x620 [ 1753.377076][ T4042] ion_ioctl+0x37a/0xca0 [ 1753.381343][ T4042] ? _ion_buffer_destroy+0xa0/0xa0 [ 1753.386476][ T4042] ? ksys_dup3+0x3c0/0x3c0 [ 1753.390911][ T4042] ? __x64_sys_futex+0x380/0x4f0 [ 1753.395866][ T4042] ? _ion_buffer_destroy+0xa0/0xa0 [ 1753.400991][ T4042] ksys_ioctl+0x11a/0x180 [ 1753.405420][ T4042] __x64_sys_ioctl+0x6f/0xb0 [ 1753.410016][ T4042] ? lockdep_hardirqs_on+0x463/0x620 [ 1753.415308][ T4042] do_syscall_64+0xf6/0x7d0 [ 1753.419831][ T4042] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1753.425730][ T4042] RIP: 0033:0x45c829 [ 1753.429634][ T4042] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1753.450023][ T4042] RSP: 002b:00007fbdaeabec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 17:42:51 executing program 1: set_mempolicy(0x0, &(0x7f0000000080)=0x10000000001, 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x1ff}, 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000000c0)=0x5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:51 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3000000}) [ 1753.458442][ T4042] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1753.466540][ T4042] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1753.474520][ T4042] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1753.482499][ T4042] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1753.490481][ T4042] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaeabf6d4 17:42:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x85060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1754.168850][ T4042] Mem-Info: [ 1754.175533][ T4042] active_anon:219324 inactive_anon:6176 isolated_anon:0 [ 1754.175533][ T4042] active_file:202 inactive_file:118 isolated_file:26 [ 1754.175533][ T4042] unevictable:0 dirty:6 writeback:0 unstable:0 [ 1754.175533][ T4042] slab_reclaimable:19179 slab_unreclaimable:160158 [ 1754.175533][ T4042] mapped:55010 shmem:6419 pagetables:4133 bounce:0 [ 1754.175533][ T4042] free:19997 free_pcp:62 free_cma:0 [ 1754.260871][ T4042] Node 0 active_anon:814848kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216508kB dirty:8kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 258048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1754.312896][ T4042] Node 0 DMA free:10176kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1754.352362][ T4042] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1754.360783][ T4042] Node 0 DMA32 free:17872kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:812808kB inactive_anon:16460kB active_file:8kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10924kB pagetables:12500kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1754.400436][ T4042] lowmem_reserve[]: 0 0 0 0 0 [ 1754.405158][ T4042] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1754.442094][ T4042] lowmem_reserve[]: 0 0 0 0 0 [ 1754.450587][ T4042] Node 0 DMA: 11*4kB (UME) 13*8kB (ME) 5*16kB (ME) 19*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10180kB [ 1754.475170][ T4042] Node 0 DMA32: 902*4kB (ME) 349*8kB (UME) 64*16kB (ME) 27*32kB (UME) 22*64kB (ME) 20*128kB (UM) 14*256kB (UM) 2*512kB (UM) 1*1024kB (M) 0*2048kB 0*4096kB = 17888kB [ 1754.496793][ T4005] warn_alloc: 7 callbacks suppressed [ 1754.496811][ T4005] syz-executor.4: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1754.500318][ T4042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1754.502163][ T4005] CPU: 1 PID: 4005 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1754.514547][ T4042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.525796][ T4005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1754.525802][ T4005] Call Trace: [ 1754.525828][ T4005] dump_stack+0x188/0x20d [ 1754.525848][ T4005] warn_alloc.cold+0x87/0x164 [ 1754.534425][ T4042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.543926][ T4005] ? zone_watermark_ok_safe+0x260/0x260 [ 1754.543943][ T4005] ? usleep_range+0x160/0x160 [ 1754.543979][ T4005] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1754.554016][ T4042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1754.557280][ T4005] ? warn_alloc+0x110/0x110 [ 1754.557317][ T4005] __alloc_pages_nodemask+0x5d9/0x810 [ 1754.561603][ T4042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1754.566255][ T4005] ? find_held_lock+0x2d/0x110 [ 1754.575518][ T4042] 6456 total pagecache pages [ 1754.581034][ T4005] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1754.581049][ T4005] ? kasan_populate_vmalloc_pte+0xf0/0x1a0 [ 1754.581070][ T4005] ? lock_downgrade+0x840/0x840 [ 1754.585711][ T4042] 0 pages in swap cache [ 1754.592270][ T4005] ? do_raw_spin_lock+0x129/0x2e0 [ 1754.592290][ T4005] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1754.592313][ T4005] alloc_pages_current+0xff/0x200 [ 1754.601841][ T4042] Swap cache stats: add 0, delete 0, find 0/0 [ 1754.606309][ T4005] __get_free_pages+0x8/0x40 [ 1754.611681][ T4042] Free swap = 0kB [ 1754.620912][ T4005] kasan_populate_vmalloc_pte+0x28/0x1a0 [ 1754.620932][ T4005] __apply_to_page_range+0x6ac/0xac0 [ 1754.620949][ T4005] ? memset+0x40/0x40 [ 1754.625677][ T4042] Total swap = 0kB [ 1754.630265][ T4005] alloc_vmap_area+0xae8/0x1e20 [ 1754.630296][ T4005] ? purge_vmap_area_lazy+0x40/0x40 [ 1754.637055][ T4042] 1965979 pages RAM [ 1754.642827][ T4005] ? lockdep_hardirqs_on+0x463/0x620 [ 1754.647662][ T4042] 0 pages HighMem/MovableOnly [ 1754.651785][ T4005] vm_map_ram+0x556/0xc50 [ 1754.656805][ T4042] 349380 pages reserved [ 1754.663194][ T4005] ion_heap_clear_pages+0x26/0x70 [ 1754.668202][ T4042] 0 pages cma reserved [ 1754.674232][ T4005] ion_heap_sglist_zero+0x1e9/0x240 [ 1754.678822][ T4042] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23268,uid=0 [ 1754.682502][ T4005] ? ion_heap_deferred_free+0x590/0x590 [ 1754.688175][ T4042] Out of memory: Killed process 23268 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1754.693451][ T4005] ? startup_64+0x2/0x30 [ 1754.714849][ T1143] oom_reaper: reaped process 4042 (syz-executor.2), now anon-rss:0kB, file-rss:34756kB, shmem-rss:0kB [ 1754.799090][ T4005] ? pagerange_is_ram_callback+0x130/0x130 [ 1754.804881][ T4005] ? trace_hardirqs_off+0x50/0x220 [ 1754.809984][ T4005] ion_system_heap_free+0x1e1/0x240 [ 1754.815161][ T4005] ? kfree+0x1eb/0x2b0 [ 1754.819215][ T4005] ion_buffer_destroy+0x14d/0x2b0 [ 1754.824309][ T4005] _ion_heap_freelist_drain+0x30b/0x4a0 [ 1754.829844][ T4005] ion_ioctl+0x975/0xca0 [ 1754.834082][ T4005] ? _ion_buffer_destroy+0xa0/0xa0 [ 1754.839195][ T4005] ? ksys_dup3+0x3c0/0x3c0 [ 1754.843592][ T4005] ? __x64_sys_futex+0x380/0x4f0 [ 1754.848518][ T4005] ? _ion_buffer_destroy+0xa0/0xa0 [ 1754.853609][ T4005] ksys_ioctl+0x11a/0x180 [ 1754.857924][ T4005] __x64_sys_ioctl+0x6f/0xb0 [ 1754.862516][ T4005] ? lockdep_hardirqs_on+0x463/0x620 [ 1754.867790][ T4005] do_syscall_64+0xf6/0x7d0 [ 1754.872280][ T4005] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1754.878149][ T4005] RIP: 0033:0x45c829 [ 1754.882032][ T4005] Code: Bad RIP value. [ 1754.886082][ T4005] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1754.894470][ T4005] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1754.902419][ T4005] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 [ 1754.910368][ T4005] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1754.918318][ T4005] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1754.926271][ T4005] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 [ 1755.904325][ T3764] ion_system_heap invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 1755.915636][ T4005] Mem-Info: [ 1755.919245][ T4005] active_anon:218780 inactive_anon:6176 isolated_anon:0 [ 1755.919245][ T4005] active_file:4 inactive_file:1339 isolated_file:0 [ 1755.919245][ T4005] unevictable:0 dirty:33 writeback:0 unstable:0 [ 1755.919245][ T4005] slab_reclaimable:19150 slab_unreclaimable:159857 [ 1755.919245][ T4005] mapped:55491 shmem:6419 pagetables:4036 bounce:0 [ 1755.919245][ T4005] free:202336 free_pcp:798 free_cma:0 [ 1755.961378][ T4049] syz-executor.5 (4049) used greatest stack depth: 21792 bytes left [ 1755.974309][ T4005] Node 0 active_anon:812696kB inactive_anon:16460kB active_file:0kB inactive_file:5536kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:219808kB dirty:28kB writeback:0kB shmem:17416kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 258048kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1756.004955][ T4005] Node 1 active_anon:62424kB inactive_anon:8244kB active_file:32kB inactive_file:820kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:2856kB dirty:104kB writeback:0kB shmem:8260kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1756.041170][ T4005] Node 0 DMA free:10520kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.073703][ T4005] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1756.099022][ T4005] Node 0 DMA32 free:219684kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:810656kB inactive_anon:16460kB active_file:0kB inactive_file:8436kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10836kB pagetables:12352kB bounce:0kB free_pcp:1560kB local_pcp:432kB free_cma:0kB [ 1756.227353][ T4005] lowmem_reserve[]: 0 0 0 0 0 [ 1756.232081][ T4005] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1756.275790][ T4005] lowmem_reserve[]: 0 0 0 0 0 [ 1756.282220][ T4005] Node 1 Normal free:582132kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:62328kB inactive_anon:8244kB active_file:264kB inactive_file:720kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:1592kB pagetables:3644kB bounce:0kB free_pcp:1564kB local_pcp:232kB free_cma:0kB [ 1756.324268][ T4005] lowmem_reserve[]: 0 0 0 0 0 [ 1756.331667][ T4005] Node 0 DMA: 19*4kB (UME) 30*8kB (UME) 10*16kB (UME) 22*32kB (UME) 4*64kB (UM) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10524kB [ 1756.353174][ T4005] Node 0 DMA32: 997*4kB (UE) 1971*8kB (UE) 743*16kB (UME) 783*32kB (UME) 1129*64kB (UE) 498*128kB (U) 24*256kB (U) 17*512kB (UM) 4*1024kB (U) 0*2048kB 0*4096kB = 211644kB [ 1756.373273][ T4005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1756.387298][ T4005] Node 1 Normal: 3579*4kB (UME) 4772*8kB (UME) 2205*16kB (UME) 2016*32kB (UME) 756*64kB (UME) 743*128kB (UME) 483*256kB (UME) 112*512kB (UME) 77*1024kB (U) 12*2048kB (U) 2*4096kB (UM) = 588380kB [ 1756.425978][ T4005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.444294][ T4005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.464639][ T4005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1756.475446][ T4005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1756.527881][ T4005] 11104 total pagecache pages [ 1756.537497][ T4005] 0 pages in swap cache [ 1756.551798][ T4005] Swap cache stats: add 0, delete 0, find 0/0 [ 1756.565711][ T4005] Free swap = 0kB [ 1756.571033][ T4005] Total swap = 0kB [ 1756.574805][ T4005] 1965979 pages RAM [ 1756.597375][ T4005] 0 pages HighMem/MovableOnly [ 1756.605292][ T4005] 349380 pages reserved [ 1756.615908][ T4005] 0 pages cma reserved 17:42:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x86060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:56 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3000000}) 17:42:56 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0xfffffbff, 0x1ff) getrusage(0x1, &(0x7f00000001c0)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r3, 0x0, 0x0, 0x0, r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={r4}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$L2TP_CMD_TUNNEL_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'xfrm0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48851}, 0x20000815) 17:42:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x87060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:56 executing program 2: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x3000000}) 17:42:56 executing program 3: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010010, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:56 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3000000}) 17:42:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r2, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:57 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:57 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010010, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r5 = dup2(r4, r3) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r3, 0x6}, &(0x7f00000001c0)=0x8) r4 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r4, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r6 = dup2(r5, r4) write$FUSE_IOCTL(r6, &(0x7f0000000000)={0x20}, 0x20) 17:42:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDFONTOP_GET(r0, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x11, 0xc, 0x0, 0x0}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000000c0)) socket$inet6(0xa, 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./bus\x00', 0x284000, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r6, 0x0, 0x300}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000440)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r6}}, 0x18) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:42:57 executing program 0: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v1={0x2, "12f0ba12f44f4f0c556da3679abb26eb30b363ce"}, 0x15, 0x3) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x88060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r3, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r4, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r5 = dup2(0xffffffffffffffff, r4) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20}, 0x20) 17:42:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r3, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r4, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) 17:42:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r3, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r4, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) 17:42:58 executing program 0: set_mempolicy(0x3, &(0x7f00000000c0)=0x2, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000200)=0x80) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)={r6, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000280)={r6, 0x9}, &(0x7f0000000300)=0x8) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, r7, 0x0, 0x0, 0x0, r8}, 0x30) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r8}, 0xc) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000080)=r9) 17:42:58 executing program 0: set_mempolicy(0x8000, &(0x7f0000000040)=0xfa, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x88200000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:42:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf0b2b5400000000", 0x3c, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)={r3, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r3, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r4 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r4, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) dup2(r5, r4) [ 1761.022307][ T3764] CPU: 0 PID: 3764 Comm: ion_system_heap Not tainted 5.7.0-rc4-syzkaller #0 [ 1761.031010][ T3764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.041100][ T3764] Call Trace: [ 1761.044401][ T3764] dump_stack+0x188/0x20d [ 1761.048748][ T3764] dump_header+0x10b/0x826 [ 1761.053180][ T3764] oom_kill_process.cold+0x10/0x15 [ 1761.058306][ T3764] out_of_memory+0x31f/0x12f0 [ 1761.063003][ T3764] ? oom_killer_disable+0x270/0x270 [ 1761.068217][ T3764] ? mutex_trylock+0x246/0x2c0 [ 1761.072996][ T3764] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1761.079689][ T3764] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1761.086308][ T3764] ? warn_alloc+0x110/0x110 [ 1761.090848][ T3764] __alloc_pages_nodemask+0x5d9/0x810 [ 1761.096243][ T3764] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1761.103031][ T3764] ? find_held_lock+0x2d/0x110 [ 1761.107822][ T3764] alloc_pages_current+0xff/0x200 [ 1761.112859][ T3764] ? memtype_check_insert.cold+0x1fc/0x1fc [ 1761.118685][ T3764] __get_free_pages+0x8/0x40 [ 1761.123300][ T3764] kasan_populate_vmalloc_pte+0x28/0x1a0 [ 1761.128958][ T3764] __apply_to_page_range+0x6ac/0xac0 [ 1761.134264][ T3764] ? memset+0x40/0x40 [ 1761.138283][ T3764] alloc_vmap_area+0xae8/0x1e20 [ 1761.143164][ T3764] ? purge_vmap_area_lazy+0x40/0x40 [ 1761.148377][ T3764] ? lockdep_hardirqs_on+0x463/0x620 [ 1761.153678][ T3764] vm_map_ram+0x556/0xc50 [ 1761.158032][ T3764] ion_heap_clear_pages+0x26/0x70 [ 1761.163089][ T3764] ion_heap_sglist_zero+0x1e9/0x240 [ 1761.168307][ T3764] ? ion_heap_deferred_free+0x590/0x590 [ 1761.173898][ T3764] ? pagerange_is_ram_callback+0x130/0x130 [ 1761.179718][ T3764] ? trace_hardirqs_off+0x50/0x220 [ 1761.184846][ T3764] ion_system_heap_free+0x1e1/0x240 [ 1761.190073][ T3764] ion_buffer_destroy+0x14d/0x2b0 [ 1761.195114][ T3764] ion_heap_deferred_free+0x269/0x590 [ 1761.200512][ T3764] ? ion_heap_shrink_scan+0x1c0/0x1c0 [ 1761.205929][ T3764] ? __sched_text_start+0x8/0x8 [ 1761.210788][ T3764] ? finish_wait+0x260/0x260 [ 1761.215391][ T3764] ? lockdep_hardirqs_on+0x463/0x620 [ 1761.220689][ T3764] ? __kthread_parkme+0x13f/0x1e0 [ 1761.225733][ T3764] ? ion_heap_shrink_scan+0x1c0/0x1c0 [ 1761.231119][ T3764] kthread+0x388/0x470 [ 1761.235214][ T3764] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1761.240943][ T3764] ret_from_fork+0x24/0x30 17:42:59 executing program 2 (fault-call:8 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:59 executing program 4 (fault-call:5 fault-nth:0): set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:42:59 executing program 0 (fault-call:13 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1761.447885][ T4141] FAULT_INJECTION: forcing a failure. [ 1761.447885][ T4141] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.526092][ T4141] CPU: 1 PID: 4141 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1761.534710][ T4141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.537066][ T4146] FAULT_INJECTION: forcing a failure. [ 1761.537066][ T4146] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.544773][ T4141] Call Trace: [ 1761.544799][ T4141] dump_stack+0x188/0x20d [ 1761.544824][ T4141] should_fail.cold+0x5/0xa [ 1761.544843][ T4141] ? fault_create_debugfs_attr+0x140/0x140 [ 1761.544868][ T4141] should_failslab+0x5/0xf [ 1761.579707][ T4141] __kmalloc+0x2d9/0x7a0 [ 1761.583959][ T4141] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1761.589945][ T4141] ? tomoyo_realpath_from_path+0xc2/0x620 [ 1761.595667][ T4141] ? lock_release+0x800/0x800 [ 1761.600353][ T4141] ? __lock_acquire+0xcbb/0x4c50 [ 1761.605302][ T4141] tomoyo_realpath_from_path+0xc2/0x620 [ 1761.611077][ T4141] ? tomoyo_profile+0x42/0x50 [ 1761.615773][ T4141] tomoyo_path_number_perm+0x1c2/0x4d0 [ 1761.621245][ T4141] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 1761.626878][ T4141] ? tomoyo_execute_permission+0x470/0x470 [ 1761.632719][ T4141] ? __fget_files+0x30d/0x500 [ 1761.637424][ T4141] ? __fget_files+0x32f/0x500 [ 1761.642207][ T4141] ? ksys_dup3+0x3c0/0x3c0 [ 1761.646881][ T4141] ? __sb_end_write+0x101/0x1d0 [ 1761.651736][ T4141] ? vfs_write+0x161/0x5d0 [ 1761.656162][ T4141] security_file_ioctl+0x6c/0xb0 [ 1761.661104][ T4141] ksys_ioctl+0x50/0x180 [ 1761.665349][ T4141] __x64_sys_ioctl+0x6f/0xb0 [ 1761.669940][ T4141] ? lockdep_hardirqs_on+0x463/0x620 [ 1761.675243][ T4141] do_syscall_64+0xf6/0x7d0 [ 1761.679748][ T4141] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1761.685640][ T4141] RIP: 0033:0x45c829 [ 1761.689531][ T4141] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1761.709133][ T4141] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.717539][ T4141] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1761.725526][ T4141] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1761.733486][ T4141] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1761.741464][ T4141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1761.749433][ T4141] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 [ 1761.757429][ T4146] CPU: 0 PID: 4146 Comm: syz-executor.2 Not tainted 5.7.0-rc4-syzkaller #0 [ 1761.766017][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1761.776075][ T4146] Call Trace: [ 1761.779371][ T4146] dump_stack+0x188/0x20d [ 1761.783703][ T4146] should_fail.cold+0x5/0xa [ 1761.788302][ T4146] ? fault_create_debugfs_attr+0x140/0x140 [ 1761.794099][ T4146] should_failslab+0x5/0xf [ 1761.798498][ T4146] __kmalloc+0x2d9/0x7a0 [ 1761.802812][ T4146] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1761.808783][ T4146] ? tomoyo_realpath_from_path+0xc2/0x620 [ 1761.814488][ T4146] ? lock_release+0x800/0x800 [ 1761.819146][ T4146] ? __lock_acquire+0xcbb/0x4c50 [ 1761.824074][ T4146] tomoyo_realpath_from_path+0xc2/0x620 [ 1761.829708][ T4146] ? tomoyo_profile+0x42/0x50 [ 1761.834380][ T4146] tomoyo_path_number_perm+0x1c2/0x4d0 [ 1761.839836][ T4146] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 1761.845452][ T4146] ? tomoyo_execute_permission+0x470/0x470 [ 1761.851367][ T4146] ? __fget_files+0x30d/0x500 [ 1761.856045][ T4146] ? __fget_files+0x32f/0x500 [ 1761.860711][ T4146] ? ksys_dup3+0x3c0/0x3c0 [ 1761.865212][ T4146] ? __sb_end_write+0x101/0x1d0 [ 1761.870064][ T4146] ? vfs_write+0x161/0x5d0 [ 1761.874478][ T4146] security_file_ioctl+0x6c/0xb0 [ 1761.879400][ T4146] ksys_ioctl+0x50/0x180 [ 1761.883630][ T4146] __x64_sys_ioctl+0x6f/0xb0 [ 1761.888201][ T4146] ? lockdep_hardirqs_on+0x463/0x620 [ 1761.893468][ T4146] do_syscall_64+0xf6/0x7d0 [ 1761.897960][ T4146] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1761.903830][ T4146] RIP: 0033:0x45c829 [ 1761.907706][ T4146] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1761.927813][ T4146] RSP: 002b:00007fbdaea9dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.936217][ T4146] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1761.944190][ T4146] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000006 [ 1761.952160][ T4146] RBP: 000000000078bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1761.960113][ T4146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1761.968064][ T4146] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fbdaea9e6d4 17:42:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1762.017736][ T4146] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1762.076189][ T4141] ERROR: Out of memory at tomoyo_realpath_from_path. 17:42:59 executing program 3 (fault-call:2 fault-nth:0): set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:42:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1762.266832][ T4154] FAULT_INJECTION: forcing a failure. [ 1762.266832][ T4154] name failslab, interval 1, probability 0, space 0, times 0 [ 1762.346535][ T4154] CPU: 0 PID: 4154 Comm: syz-executor.3 Not tainted 5.7.0-rc4-syzkaller #0 [ 1762.355163][ T4154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1762.365229][ T4154] Call Trace: [ 1762.368553][ T4154] dump_stack+0x188/0x20d [ 1762.372915][ T4154] should_fail.cold+0x5/0xa [ 1762.377441][ T4154] ? fault_create_debugfs_attr+0x140/0x140 [ 1762.383326][ T4154] should_failslab+0x5/0xf [ 1762.387770][ T4154] __kmalloc+0x2d9/0x7a0 [ 1762.392031][ T4154] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1762.398021][ T4154] ? tomoyo_realpath_from_path+0xc2/0x620 [ 1762.403752][ T4154] ? lock_release+0x800/0x800 [ 1762.408450][ T4154] ? __lock_acquire+0xcbb/0x4c50 [ 1762.413418][ T4154] tomoyo_realpath_from_path+0xc2/0x620 [ 1762.418977][ T4154] ? tomoyo_profile+0x42/0x50 [ 1762.423699][ T4154] tomoyo_path_number_perm+0x1c2/0x4d0 [ 1762.429196][ T4154] ? tomoyo_path_number_perm+0x17a/0x4d0 [ 1762.434857][ T4154] ? tomoyo_execute_permission+0x470/0x470 [ 1762.440704][ T4154] ? __fget_files+0x30d/0x500 [ 1762.445399][ T4154] ? __fget_files+0x32f/0x500 [ 1762.450083][ T4154] ? ksys_dup3+0x3c0/0x3c0 [ 1762.454510][ T4154] ? __sb_end_write+0x101/0x1d0 [ 1762.459368][ T4154] ? vfs_write+0x161/0x5d0 [ 1762.463797][ T4154] security_file_ioctl+0x6c/0xb0 [ 1762.468757][ T4154] ksys_ioctl+0x50/0x180 [ 1762.473022][ T4154] __x64_sys_ioctl+0x6f/0xb0 [ 1762.477826][ T4154] ? lockdep_hardirqs_on+0x463/0x620 [ 1762.483138][ T4154] do_syscall_64+0xf6/0x7d0 [ 1762.487671][ T4154] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1762.493582][ T4154] RIP: 0033:0x45c829 [ 1762.497521][ T4154] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1762.517222][ T4154] RSP: 002b:00007f4821926c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1762.525641][ T4154] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1762.533629][ T4154] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 17:43:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x10, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1762.541619][ T4154] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1762.549603][ T4154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1762.557623][ T4154] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f48219276d4 17:43:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0xe0, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x89060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0xffe0, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1763.618091][ T4154] ERROR: Out of memory at tomoyo_realpath_from_path. 17:43:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0xffffffe0, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8a060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0xffffffffffffffe0, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:05 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:05 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8b060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:06 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x2, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x10) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x10, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:06 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x10, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x2288, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:06 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x4c01, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x2, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4b48, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:06 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x1000000) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:06 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x541b, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8c060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:06 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x5421, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:06 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4c01, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x10, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4c80, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x10000000) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:07 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x5450, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4c81, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:07 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x5451, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x541b, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x100000000000000) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:07 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x5452, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8d060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:07 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5421, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:07 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x2285, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x5460, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x1000000000000000) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:08 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5423, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:08 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x6364, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:08 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x8912, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:08 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETENCODER(r2, 0xc01464a6, &(0x7f0000000040)={0x401}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x4, 0x0, 0x10001, 0x1179}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x8, r3, 0x1, 0x6}) 17:43:08 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5450, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:08 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="680024000000000000007000ffdbdf250a80141f3f0000070400010014000200fe8000000000000000000000000000aa14000200fe8000000000000000000000000000aa0500160088000000080004000001000014000200ff010000e7ff00000000000000000001"], 0x68}}, 0x1) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:08 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5451, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8e060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:09 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x8933, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5452, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4b2f, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x500, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)={0x7c, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_HELP_NAME={0xe, 0x6, 'snmp_trap\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x40, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x48080) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x1}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280)='nl80211\x00') sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x7c, r3, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x14, 0x4, "83fd68e1fc8cb7643d58117c91f10a3f"}]}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "29b94ee8de933b4bd82bbe5ca0"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x40008c5) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x90, 0x7}, 0xac, 0x9, 0x2, 0x800}) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1771.268419][ T3764] Mem-Info: [ 1771.271690][ T3764] active_anon:228403 inactive_anon:6176 isolated_anon:0 [ 1771.271690][ T3764] active_file:1765 inactive_file:2730 isolated_file:0 [ 1771.271690][ T3764] unevictable:0 dirty:49 writeback:0 unstable:0 [ 1771.271690][ T3764] slab_reclaimable:19277 slab_unreclaimable:158995 [ 1771.271690][ T3764] mapped:58277 shmem:6419 pagetables:3998 bounce:0 [ 1771.271690][ T3764] free:175816 free_pcp:748 free_cma:0 17:43:09 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5457, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4b48, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x400454ca, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 1: set_mempolicy(0x8000, &(0x7f0000000040)=0xc145, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@nfc, &(0x7f0000000100)=0x80, 0x101800) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r4, 0x4, 0x20}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r4, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}, 0x3f, 0x1}, &(0x7f0000000200)=0x90) setxattr$trusted_overlay_nlink(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U+', 0x80000001}, 0x16, 0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x5460, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x40049409, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x8f060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:09 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) lseek(r1, 0xddc, 0x2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:09 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x6364, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x40186366, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4c01, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x8912, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:09 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x4020940d, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:09 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x541b, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x8914, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) ioctl$BLKROTATIONAL(0xffffffffffffffff, 0x127e, &(0x7f0000000300)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:10 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0x80086301, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x8933, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x90060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:10 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xae01, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5421, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f00000002c0), 0x4) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x613b18ff774a64c}}, 0x20) 17:43:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xae41, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:10 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5450, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:10 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40045431, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:10 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184902, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:11 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x400454ca, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4644e98e}, 0x0, 0x5, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000340)='./file0\x00', 0x2, 0xffffff80) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000300)="3735aaa1cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x37, 0x0, &(0x7f0000618000)={0x2, 0x4ea0, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) ioctl$SG_GET_LOW_DMA(r4, 0x227a, &(0x7f00000002c0)) 17:43:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x91060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:11 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184903, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:11 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40046207, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300)=0xb, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5451, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:11 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40049409, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:11 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184904, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)='+@md5sumwlan0[loxsecurityeth0vboxnet0wlan1ppp0wlan0\x00', 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x10000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') readv(r2, &(0x7f0000000040)=[{&(0x7f0000002400)=""/4096, 0x10b6}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000002680)=[{0x0, 0x2d, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x18, 0x1, 0x1, [r0]}}], 0x18}], 0x4924924924922a7, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) 17:43:11 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4008ae89, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184905, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4008ae90, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184906, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x92060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:12 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4008af00, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5452, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0xd2, 0x3], 0x2, 0x20, 0x0, 0xfff, 0x9, 0x10001, 0x487, {0x3, 0x6, 0x7ff, 0x5, 0x5, 0xfff, 0x8, 0x3, 0xfb, 0x0, 0x3f, 0xc14c, 0x2, 0x4020000, "5afad3a73680ed34d77f7903e983b115c22d5b48301c39a79b543fd88606757e"}}) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184907, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40186366, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:12 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5460, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184908, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:12 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4020565a, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000002c0)) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:13 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0189436, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:13 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4020940d, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x93060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:13 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4040ae9e, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:13 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc018ff00, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x5501, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:13 executing program 0: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x6000, 0x80000000, 0x7ff, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x80) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240), 0x0) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1d}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@private1}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 17:43:13 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x6364, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:13 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x40505331, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:14 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc020660b, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4090ae82, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:14 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010010, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x4138ae84, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x10300, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000003c0)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001780)=ANY=[@ANYBLOB="8000", @ANYRES16=r4, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NLBL_CIPSOV4_C_LIST(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x164, r4, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x13e5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbcad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa65f}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32cb8c99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7235}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88c2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1578}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x35d0}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddf6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6796f35b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c51}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x56b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a6f7a18}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x80, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a85f963}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x141613ec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d88a673}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62deed94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62fcea04}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6edda4f2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e995655}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x422c8f59}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x164}, 0x1, 0x0, 0x0, 0x800}, 0x8880) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x500, 0x0) write$P9_RWALK(r5, &(0x7f00000000c0)={0x23, 0x6f, 0x1, {0x2, [{0x2, 0x2}, {0x8d, 0x4, 0x8}]}}, 0x23) getsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000000100)=""/64, &(0x7f0000000140)=0x40) 17:43:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x94060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:14 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x80045430, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:14 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x7006, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) write$P9_RLERROR(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="745d000007796cd994893630030000b1ed5151200b6137d5c0a5cfcfed024fff0b008d9b00282f"], 0x15) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x7014, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x80086301, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:14 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xa, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:14 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0x8138ae83, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x10, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:15 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000340)={0x0, 0x8, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x9909e2, 0x5, [], @p_u16=&(0x7f00000002c0)=0xec3}}) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1777.717018][ T3764] Node 0 active_anon:829052kB inactive_anon:16464kB active_file:3644kB inactive_file:2772kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222872kB dirty:76kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 256000kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1777.754800][ T3764] Node 1 active_anon:84620kB inactive_anon:8240kB active_file:2972kB inactive_file:6360kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8332kB dirty:180kB writeback:0kB shmem:8256kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 1777.791258][ T3764] Node 0 DMA free:10284kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1777.862594][ T3764] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1777.871476][ T3764] Node 0 DMA32 free:87620kB min:87132kB low:96112kB high:105092kB reserved_highatomic:0KB active_anon:826792kB inactive_anon:16464kB active_file:3644kB inactive_file:2772kB unevictable:0kB writepending:76kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10832kB pagetables:12324kB bounce:0kB free_pcp:792kB local_pcp:260kB free_cma:0kB 17:43:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x95060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5000000, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:15 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x8912, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x400a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f00000001c0)={0x0, 0x0, 0x10, 0x5bd9}, &(0x7f0000000040)=0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={r2, 0x4}, &(0x7f0000000300)=0x8) fchmodat(r0, 0x0, 0xd4) r3 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r3, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x7e, 0x0) dup2(r4, r3) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20}, 0x20) 17:43:15 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x180) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:15 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0046686, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:15 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xa000000, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:16 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc008ae05, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:16 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x10000000, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1778.400544][ T3764] lowmem_reserve[]: 0 0 0 0 0 [ 1778.410156][ T3764] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:43:16 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0105512, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = dup2(0xffffffffffffffff, r2) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 17:43:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x96060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:16 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:16 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x400400) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000000080)={0x100004, 0x103000}) r1 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x100000000, 0xc4043) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x14, r2, 0x5}, 0x14}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)={0x1c, r2, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5}]}, 0x1c}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000000}, 0xc000) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:16 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc01064b5, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x8933, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1778.963051][ T4664] warn_alloc: 1 callbacks suppressed [ 1778.963072][ T4664] syz-executor.1: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 17:43:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xae01, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1779.047844][ T4664] CPU: 0 PID: 4664 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1779.056478][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.066553][ T4664] Call Trace: [ 1779.069862][ T4664] dump_stack+0x188/0x20d [ 1779.074208][ T4664] warn_alloc.cold+0x87/0x164 [ 1779.078903][ T4664] ? zone_watermark_ok_safe+0x260/0x260 [ 1779.084463][ T4664] ? ___might_sleep+0x15a/0x2b0 [ 1779.089336][ T4664] ? __alloc_pages_direct_compact+0x366/0x420 [ 1779.095426][ T4664] ? get_page_from_freelist+0x3580/0x3580 [ 1779.101164][ T4664] ? __isolate_free_page+0x610/0x610 [ 1779.106475][ T4664] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1779.113082][ T4664] ? get_page_from_freelist+0x1767/0x3580 [ 1779.118839][ T4664] ? warn_alloc+0x110/0x110 [ 1779.123384][ T4664] ? __isolate_free_page+0x610/0x610 [ 1779.128697][ T4664] __alloc_pages_nodemask+0x5d9/0x810 [ 1779.134082][ T4664] ? mutex_trylock+0x2c0/0x2c0 [ 1779.138856][ T4664] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1779.144333][ T4664] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1779.151140][ T4664] ? wait_for_completion+0x270/0x270 [ 1779.156680][ T4664] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1779.163143][ T4664] alloc_pages_current+0xff/0x200 [ 1779.168193][ T4664] ion_page_pool_alloc+0x186/0x280 [ 1779.173336][ T4664] ion_system_heap_allocate+0x321/0xb00 [ 1779.178917][ T4664] ? ion_system_heap_free+0x240/0x240 [ 1779.184300][ T4664] ? kfree+0x1eb/0x2b0 [ 1779.188406][ T4664] ? ion_ioctl+0x9da/0xca0 [ 1779.192869][ T4664] ? lockdep_hardirqs_on+0x463/0x620 [ 1779.198177][ T4664] ion_ioctl+0x37a/0xca0 [ 1779.202459][ T4664] ? _ion_buffer_destroy+0xa0/0xa0 [ 1779.207603][ T4664] ? ksys_dup3+0x3c0/0x3c0 [ 1779.212045][ T4664] ? __x64_sys_futex+0x380/0x4f0 [ 1779.217002][ T4664] ? _ion_buffer_destroy+0xa0/0xa0 [ 1779.222133][ T4664] ksys_ioctl+0x11a/0x180 [ 1779.226494][ T4664] __x64_sys_ioctl+0x6f/0xb0 [ 1779.231092][ T4664] ? lockdep_hardirqs_on+0x463/0x620 [ 1779.236387][ T4664] do_syscall_64+0xf6/0x7d0 [ 1779.240902][ T4664] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1779.246797][ T4664] RIP: 0033:0x45c829 [ 1779.250707][ T4664] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1779.270328][ T4664] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1779.278770][ T4664] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1779.286755][ T4664] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000003 17:43:17 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184902, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1779.294752][ T4664] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1779.302742][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1779.310922][ T4664] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007f20a92856d4 17:43:17 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3000000}) 17:43:17 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184903, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xbce0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x0, 0x3, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="b99200000000000006000000000002000000000000000001000700000005000500feff070000000000000010"], 0x2c}, 0x1, 0x0, 0x0, 0x44010}, 0x4040050) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x24008810, &(0x7f00000003c0)={0x2, 0x4e24, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:17 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xae41, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:17 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184904, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1779.582469][ T4664] Mem-Info: [ 1779.594592][ T4664] active_anon:228952 inactive_anon:6176 isolated_anon:0 [ 1779.594592][ T4664] active_file:1457 inactive_file:2259 isolated_file:0 [ 1779.594592][ T4664] unevictable:0 dirty:69 writeback:0 unstable:0 [ 1779.594592][ T4664] slab_reclaimable:19039 slab_unreclaimable:160831 [ 1779.594592][ T4664] mapped:57576 shmem:6419 pagetables:4065 bounce:0 [ 1779.594592][ T4664] free:197208 free_pcp:168 free_cma:0 [ 1779.668809][ T4664] Node 0 active_anon:831100kB inactive_anon:16464kB active_file:2528kB inactive_file:2168kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:221244kB dirty:76kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 256000kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:43:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x97060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:17 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184905, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1779.812426][ T4664] Node 0 DMA free:10288kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1779.910238][ T4664] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1779.929529][ T4664] Node 0 DMA32 free:89164kB min:89180kB low:98160kB high:107140kB reserved_highatomic:0KB active_anon:828840kB inactive_anon:16464kB active_file:1652kB inactive_file:1032kB unevictable:0kB writepending:76kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10832kB pagetables:12324kB bounce:0kB free_pcp:1740kB local_pcp:1488kB free_cma:0kB [ 1780.086643][ T4664] lowmem_reserve[]: 0 0 0 0 0 [ 1780.103173][ T4664] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1780.201453][ T4664] lowmem_reserve[]: 0 0 0 0 0 [ 1780.220028][ T4664] Node 0 DMA: 11*4kB (UME) 16*8kB (UME) 19*16kB (UE) 23*32kB (UME) 2*64kB (U) 6*128kB (U) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10300kB [ 1780.286128][ T4664] Node 0 DMA32: 2278*4kB (UME) 736*8kB (UME) 429*16kB (UME) 440*32kB (UME) 29*64kB (ME) 344*128kB (UM) 19*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 0*4096kB = 88744kB [ 1780.328412][ T4664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1780.385194][ T4664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.418165][ T4664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.456155][ T4664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1780.502129][ T4664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1780.540060][ T4664] 10045 total pagecache pages [ 1780.554019][ T4664] 0 pages in swap cache [ 1780.560741][ T4664] Swap cache stats: add 0, delete 0, find 0/0 [ 1780.578197][ T4664] Free swap = 0kB [ 1780.582054][ T4664] Total swap = 0kB [ 1780.592438][ T4664] 1965979 pages RAM [ 1780.610948][ T4664] 0 pages HighMem/MovableOnly [ 1780.620064][ T4664] 349380 pages reserved [ 1780.630858][ T4664] 0 pages cma reserved [ 1780.693875][ T3764] lowmem_reserve[]: 0 0 0 0 0 [ 1780.862837][ T3764] Node 1 Normal free:804820kB min:53952kB low:67440kB high:80928kB reserved_highatomic:0KB active_anon:84720kB inactive_anon:8240kB active_file:3452kB inactive_file:13800kB unevictable:0kB writepending:0kB present:3932160kB managed:3870200kB mlocked:0kB kernel_stack:1648kB pagetables:3704kB bounce:0kB free_pcp:840kB local_pcp:296kB free_cma:0kB [ 1781.139205][ T3764] lowmem_reserve[]: 0 0 0 0 0 [ 1781.172768][ T3764] Node 0 DMA: 11*4kB (UME) 13*8kB (UME) 19*16kB (UE) 23*32kB (UME) 2*64kB (U) 6*128kB (U) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10276kB [ 1781.353497][ T3764] Node 0 DMA32: 1854*4kB (UME) 721*8kB (UME) 469*16kB (UME) 421*32kB (UME) 41*64kB (UME) 344*128kB (UM) 19*256kB (UM) 2*512kB (M) 2*1024kB (M) 0*2048kB 0*4096kB = 88752kB [ 1781.678602][ T3764] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1781.698338][ T3764] Node 1 Normal: 2524*4kB (UE) 2952*8kB (UE) 1972*16kB (UME) 1998*32kB (UE) 788*64kB (UE) 632*128kB (UME) 440*256kB (UME) 152*512kB (UME) 194*1024kB (U) 80*2048kB (UM) 135*4096kB (U) = 1366448kB [ 1781.723263][ T3764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.884461][ T3764] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.904373][ T3764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1781.914340][ T3764] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1781.931781][ T3764] 10781 total pagecache pages [ 1781.936958][ T3764] 0 pages in swap cache [ 1781.941530][ T3764] Swap cache stats: add 0, delete 0, find 0/0 [ 1781.958469][ T3764] Free swap = 0kB [ 1781.962384][ T3764] Total swap = 0kB [ 1781.973367][ T3764] 1965979 pages RAM [ 1782.011336][ T3764] 0 pages HighMem/MovableOnly [ 1782.023102][ T3764] 349380 pages reserved [ 1782.078515][ T3764] 0 pages cma reserved [ 1782.084278][ T3764] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23074,uid=0 [ 1782.231648][ T3764] Out of memory: Killed process 23074 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1782.980177][ T1143] oom_reaper: reaped process 4664 (syz-executor.1), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB [ 1783.007150][ T1143] oom_reaper: reaped process 4685 (syz-executor.4), now anon-rss:0kB, file-rss:34732kB, shmem-rss:0kB 17:43:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x98060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:21 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184906, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x400454ca, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:21 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x4, 0x7, 0x4, 0x10, 0xffff, {0x0, 0x2710}, {0x5, 0x0, 0x8, 0x7, 0xff, 0x3, "718b9e7e"}, 0x400, 0x4, @offset=0x6, 0x7, 0x0, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="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"/2095], 0x82f) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:21 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x57f}, 0x1c) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:22 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) dup(r1) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000000)={r4, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={r4, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r5, 0x4}, &(0x7f0000000180)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:22 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184907, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f00000002c0)={'ipvs\x00'}, &(0x7f0000000300)=0x1e) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000340)={0x0, 0x3, 0x6, 0xe26}) fchmodat(r0, 0x0, 0xd4) r1 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r1, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r3 = dup2(r2, r1) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 17:43:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x40045564, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x99060200, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:22 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3000000}) [ 1784.583392][ T4734] syz-executor.1 invoked oom-killer: gfp_mask=0x2dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1784.597987][ T4734] CPU: 1 PID: 4734 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1784.606590][ T4734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.616668][ T4734] Call Trace: [ 1784.620057][ T4734] dump_stack+0x188/0x20d [ 1784.624396][ T4734] dump_header+0x10b/0x826 [ 1784.628821][ T4734] oom_kill_process.cold+0x10/0x15 [ 1784.633939][ T4734] out_of_memory+0x31f/0x12f0 [ 1784.638638][ T4734] ? oom_killer_disable+0x270/0x270 [ 1784.643849][ T4734] ? mutex_trylock+0x246/0x2c0 [ 1784.648646][ T4734] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1784.655328][ T4734] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1784.661954][ T4734] ? warn_alloc+0x110/0x110 [ 1784.666497][ T4734] __alloc_pages_nodemask+0x5d9/0x810 [ 1784.671978][ T4734] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1784.678752][ T4734] ? mark_held_locks+0x9f/0xe0 [ 1784.683528][ T4734] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1784.689350][ T4734] ? lockdep_hardirqs_on+0x463/0x620 [ 1784.694674][ T4734] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1784.701103][ T4734] alloc_pages_current+0xff/0x200 [ 1784.706146][ T4734] __get_free_pages+0x8/0x40 [ 1784.710746][ T4734] __genradix_ptr_alloc+0x15a/0x3a0 [ 1784.716002][ T4734] __genradix_prealloc+0x56/0x90 [ 1784.721030][ T4734] sctp_stream_alloc_out.part.0+0x50/0xa0 [ 1784.726778][ T4734] sctp_stream_init+0x277/0x3f0 [ 1784.731695][ T4734] sctp_association_new+0x12f1/0x21a0 [ 1784.737172][ T4734] sctp_connect_new_asoc+0x14b/0x580 [ 1784.742469][ T4734] sctp_sendmsg+0x1396/0x1f30 [ 1784.747161][ T4734] ? __fget_files+0x30d/0x500 [ 1784.752074][ T4734] ? __sctp_setsockopt_connectx+0x180/0x180 [ 1784.758003][ T4734] ? aa_af_perm+0x260/0x260 [ 1784.762531][ T4734] inet_sendmsg+0x99/0xe0 [ 1784.766876][ T4734] ? inet_send_prepare+0x4d0/0x4d0 [ 1784.771994][ T4734] sock_sendmsg+0xcf/0x120 [ 1784.776424][ T4734] __sys_sendto+0x220/0x330 [ 1784.780932][ T4734] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1784.786327][ T4734] ? _copy_to_user+0x126/0x160 [ 1784.791104][ T4734] ? put_timespec64+0xcb/0x120 [ 1784.795876][ T4734] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1784.801608][ T4734] ? __x64_sys_futex+0x380/0x4f0 [ 1784.806561][ T4734] ? __x64_sys_clock_gettime+0x165/0x240 [ 1784.812236][ T4734] ? __ia32_sys_clock_settime+0x260/0x260 [ 1784.817979][ T4734] __x64_sys_sendto+0xdd/0x1b0 [ 1784.822757][ T4734] ? lockdep_hardirqs_on+0x463/0x620 [ 1784.828055][ T4734] do_syscall_64+0xf6/0x7d0 [ 1784.832568][ T4734] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1784.838483][ T4734] RIP: 0033:0x45c829 [ 1784.842384][ T4734] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1784.862279][ T4734] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1784.871432][ T4734] RAX: ffffffffffffffda RBX: 0000000000500d40 RCX: 000000000045c829 [ 1784.879427][ T4734] RDX: 0000000000000001 RSI: 00000000203cef9f RDI: 0000000000000006 [ 1784.887415][ T4734] RBP: 000000000078bf00 R08: 0000000020618000 R09: 0000000000000010 [ 1784.895395][ T4734] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1784.903397][ T4734] R13: 0000000000000a08 R14: 00000000004ccbe1 R15: 00007f20a92856d4 [ 1784.925112][ T4734] Mem-Info: [ 1784.928469][ T4734] active_anon:227919 inactive_anon:6176 isolated_anon:0 [ 1784.928469][ T4734] active_file:1083 inactive_file:3618 isolated_file:0 [ 1784.928469][ T4734] unevictable:0 dirty:32 writeback:0 unstable:0 [ 1784.928469][ T4734] slab_reclaimable:19004 slab_unreclaimable:159856 [ 1784.928469][ T4734] mapped:58068 shmem:6419 pagetables:4051 bounce:0 [ 1784.928469][ T4734] free:441771 free_pcp:130 free_cma:0 17:43:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000300)='./bus\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="140125bd7000fddf25310800000800bc00000fd01995357be1bdf21dc99ed13298d16d0600fafd51ea59ea005099b08501738560455969d8e975f17255dee61a25036e0bb146e758b284a443c51bb059db650bf5d70a", @ANYRES32, @ANYBLOB='\b\x00R\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0800db00", @ANYRES32=r2, @ANYBLOB="080001000400000008005200", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48001}, 0x40080) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:22 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4004556a, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1785.106561][ T4734] Node 0 active_anon:826876kB inactive_anon:16464kB active_file:92kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216740kB dirty:12kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 253952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1785.177725][ T4734] Node 0 DMA free:10272kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:43:22 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0189436, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1785.293264][ T4734] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1785.310417][ T4734] Node 0 DMA32 free:87784kB min:89180kB low:98160kB high:107140kB reserved_highatomic:0KB active_anon:824616kB inactive_anon:16464kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:12kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10800kB pagetables:12220kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB 17:43:23 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc018ff00, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x9a030000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) [ 1785.452662][ T4734] lowmem_reserve[]: 0 0 0 0 0 [ 1785.460279][ T4734] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1785.639342][ T4734] lowmem_reserve[]: 0 0 0 0 0 [ 1785.662906][ T4734] Node 0 DMA: 12*4kB (UME) 12*8kB (ME) 19*16kB (UE) 23*32kB (UME) 2*64kB (U) 6*128kB (U) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10272kB [ 1785.745439][ T4734] Node 0 DMA32: 1802*4kB (UME) 881*8kB (UME) 237*16kB (UME) 213*32kB (UME) 52*64kB (UME) 336*128kB (UM) 19*256kB (UM) 2*512kB (M) 8*1024kB (UM) 2*2048kB (M) 0*4096kB = 89376kB [ 1785.826938][ T4734] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1785.869921][ T4734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.897398][ T4734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1785.930264][ T4734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1785.969360][ T4734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1786.005534][ T4734] 11928 total pagecache pages [ 1786.024960][ T4734] 0 pages in swap cache [ 1786.042016][ T4734] Swap cache stats: add 0, delete 0, find 0/0 [ 1786.070696][ T4734] Free swap = 0kB [ 1786.084877][ T4734] Total swap = 0kB [ 1786.097973][ T4734] 1965979 pages RAM [ 1786.110797][ T4734] 0 pages HighMem/MovableOnly [ 1786.127466][ T4734] 349380 pages reserved [ 1786.140627][ T4734] 0 pages cma reserved [ 1786.154523][ T4734] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=23034,uid=0 [ 1786.315897][ T4734] Out of memory: Killed process 23034 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 17:43:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x9effffff, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:24 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x40049409, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:24 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000002, 0x9e558, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0xfffffffffffffffc, 0x0, 0x5, 0xfffffffffffffffc, 0x4, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./file1\x00', 0x8043, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x40, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f00000003c0)='./file0\x00', 0x7e, 0x0) r3 = dup2(r0, 0xffffffffffffffff) write$FUSE_IOCTL(r3, &(0x7f0000000000)={0x20}, 0x20) 17:43:24 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc020660b, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:24 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3000000}) 17:43:24 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) dup(r0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x26040, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x410010005, 0x37, 0x1, r5, 0x3000000}) 17:43:24 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0585609, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x1ff]}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:24 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3000000}) 17:43:24 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc058560f, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:24 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc058565d, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000200)) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x4, 0x0, 0x8}}, 0x20) [ 1787.280413][ T4790] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1787.335682][ T4790] CPU: 0 PID: 4790 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1787.344298][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.354366][ T4790] Call Trace: [ 1787.357683][ T4790] dump_stack+0x188/0x20d [ 1787.362035][ T4790] dump_header+0x10b/0x826 [ 1787.366470][ T4790] oom_kill_process.cold+0x10/0x15 [ 1787.371597][ T4790] out_of_memory+0x31f/0x12f0 [ 1787.376298][ T4790] ? oom_killer_disable+0x270/0x270 [ 1787.381521][ T4790] ? mutex_trylock+0x246/0x2c0 [ 1787.386301][ T4790] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1787.393005][ T4790] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1787.399651][ T4790] ? warn_alloc+0x110/0x110 [ 1787.404206][ T4790] __alloc_pages_nodemask+0x5d9/0x810 [ 1787.409690][ T4790] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1787.416468][ T4790] ? print_usage_bug+0x240/0x240 [ 1787.421421][ T4790] ? __lock_acquire+0xcbb/0x4c50 [ 1787.426419][ T4790] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1787.432858][ T4790] alloc_pages_vma+0xd9/0x600 [ 1787.437558][ T4790] wp_page_copy+0x20b/0x16a0 [ 1787.442201][ T4790] ? do_wp_page+0x590/0x1440 [ 1787.446810][ T4790] ? follow_pfn+0x250/0x250 [ 1787.451420][ T4790] ? lock_downgrade+0x840/0x840 [ 1787.456327][ T4790] ? vm_normal_page+0x14d/0x380 [ 1787.461202][ T4790] ? __handle_mm_fault+0x189c/0x3c90 [ 1787.466512][ T4790] do_wp_page+0x598/0x1440 [ 1787.470950][ T4790] ? finish_mkwrite_fault+0x5b0/0x5b0 [ 1787.476334][ T4790] ? rwlock_bug.part.0+0x90/0x90 [ 1787.481285][ T4790] ? fault_around_bytes_set+0x90/0x90 [ 1787.486685][ T4790] __handle_mm_fault+0x2381/0x3c90 [ 1787.491819][ T4790] ? vm_insert_pages+0x6a0/0x6a0 [ 1787.496987][ T4790] ? count_memcg_event_mm+0x1e2/0x3d0 [ 1787.502392][ T4790] ? mark_held_locks+0x9f/0xe0 [ 1787.507213][ T4790] handle_mm_fault+0x1a5/0x660 [ 1787.511999][ T4790] do_page_fault+0x55b/0x13da [ 1787.516701][ T4790] page_fault+0x39/0x40 [ 1787.520965][ T4790] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1787.527304][ T4790] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1787.546922][ T4790] RSP: 0000:ffffc90003757b40 EFLAGS: 00010206 [ 1787.552996][ T4790] RAX: 0000000000000001 RBX: 000000000073b058 RCX: 0000000000000005 [ 1787.560976][ T4790] RDX: 0000000000000000 RSI: ffffc90003757bd0 RDI: 000000000073b058 [ 1787.568967][ T4790] RBP: ffffc90003757bd0 R08: 0000000000006f6c R09: fffff520006eaf7f [ 1787.576948][ T4790] R10: ffffc90003757bf7 R11: fffff520006eaf7e R12: 0000000000000028 [ 1787.584931][ T4790] R13: 000000000073b080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1787.592944][ T4790] _copy_to_user+0x11e/0x160 [ 1787.597556][ T4790] inet_gifconf+0x23c/0x490 [ 1787.602083][ T4790] ? inet_set_link_af+0x3f0/0x3f0 [ 1787.607151][ T4790] ? inet_set_link_af+0x3f0/0x3f0 [ 1787.612190][ T4790] dev_ifconf+0xd3/0x230 [ 1787.616461][ T4790] sock_do_ioctl+0x260/0x2f0 [ 1787.621072][ T4790] ? compat_ifr_data_ioctl+0x160/0x160 [ 1787.626586][ T4790] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1787.632496][ T4790] ? do_vfs_ioctl+0x50c/0x1360 [ 1787.637454][ T4790] ? ioctl_file_clone+0x180/0x180 [ 1787.642534][ T4790] sock_ioctl+0x3ec/0x790 [ 1787.646905][ T4790] ? dlci_ioctl_set+0x30/0x30 [ 1787.651591][ T4790] ? ksys_dup3+0x3c0/0x3c0 [ 1787.656023][ T4790] ? __x64_sys_futex+0x380/0x4f0 [ 1787.660979][ T4790] ? dlci_ioctl_set+0x30/0x30 [ 1787.665673][ T4790] ksys_ioctl+0x11a/0x180 [ 1787.670018][ T4790] __x64_sys_ioctl+0x6f/0xb0 [ 1787.674617][ T4790] ? lockdep_hardirqs_on+0x463/0x620 [ 1787.680001][ T4790] do_syscall_64+0xf6/0x7d0 [ 1787.684521][ T4790] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1787.690415][ T4790] RIP: 0033:0x45c829 [ 1787.694314][ T4790] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1787.714100][ T4790] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.722553][ T4790] RAX: ffffffffffffffda RBX: 00000000004e8f00 RCX: 000000000045c829 [ 1787.730624][ T4790] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000007 [ 1787.738607][ T4790] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1787.746587][ T4790] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1787.754594][ T4790] R13: 000000000000040f R14: 00000000004c6afa R15: 00007f20a92856d4 [ 1788.027177][ T4790] Mem-Info: [ 1788.030460][ T4790] active_anon:226794 inactive_anon:6176 isolated_anon:0 [ 1788.030460][ T4790] active_file:1081 inactive_file:4990 isolated_file:0 [ 1788.030460][ T4790] unevictable:0 dirty:8 writeback:0 unstable:0 [ 1788.030460][ T4790] slab_reclaimable:18926 slab_unreclaimable:159989 [ 1788.030460][ T4790] mapped:58775 shmem:6419 pagetables:3970 bounce:0 [ 1788.030460][ T4790] free:472088 free_pcp:157 free_cma:0 [ 1788.091303][ T4790] Node 0 active_anon:824680kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216540kB dirty:8kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 253952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1788.132656][ T4790] Node 0 DMA free:10296kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2260kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.169425][ T4790] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1788.176504][ T4790] Node 0 DMA32 free:102124kB min:89180kB low:98160kB high:107140kB reserved_highatomic:0KB active_anon:822420kB inactive_anon:16464kB active_file:4kB inactive_file:8kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10768kB pagetables:12116kB bounce:0kB free_pcp:752kB local_pcp:200kB free_cma:0kB [ 1788.221782][ T4790] lowmem_reserve[]: 0 0 0 0 0 [ 1788.231164][ T4790] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1788.267892][ T4790] lowmem_reserve[]: 0 0 0 0 0 [ 1788.272905][ T4790] Node 0 DMA: 12*4kB (UME) 16*8kB (UME) 19*16kB (UE) 23*32kB (UME) 2*64kB (U) 6*128kB (U) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10304kB [ 1788.301437][ T4790] Node 0 DMA32: 815*4kB (UME) 766*8kB (UME) 388*16kB (UME) 263*32kB (UME) 122*64kB (UME) 340*128kB (UM) 21*256kB (UM) 2*512kB (M) 15*1024kB (UM) 3*2048kB (M) 0*4096kB = 103244kB [ 1788.320269][ T4790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1788.335156][ T4790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.346225][ T4790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.356274][ T4790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1788.371562][ T4790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1788.383962][ T4790] 11940 total pagecache pages [ 1788.397115][ T4790] 0 pages in swap cache [ 1788.401433][ T4790] Swap cache stats: add 0, delete 0, find 0/0 [ 1788.408573][ T4790] Free swap = 0kB [ 1788.412480][ T4790] Total swap = 0kB [ 1788.417866][ T4790] 1965979 pages RAM [ 1788.421833][ T4790] 0 pages HighMem/MovableOnly [ 1788.428224][ T4790] 349380 pages reserved [ 1788.432641][ T4790] 0 pages cma reserved [ 1788.438379][ T4790] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=22919,uid=0 [ 1788.454749][ T4790] Out of memory: Killed process 22919 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1788.475382][ T1143] oom_reaper: reaped process 22919 (syz-executor.2), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB 17:43:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xa2000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:26 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010002, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:26 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x3000000}) 17:43:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000340)=&(0x7f0000000300)) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x40186366, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:26 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0xde200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:26 executing program 1: socket$inet6(0xa, 0x3, 0x1) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, {0x2, 0x4e24, @remote}, 0x18, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000040)='tunl0\x00', 0x588, 0x7, 0x8}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8983, &(0x7f0000000180)) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@private, @in6=@dev}}, {{@in6=@private0}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = dup(r7) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_RESERVED(r8, 0x5601, 0x0) 17:43:26 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4020940d, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:26 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000002c0)={{0x32, @rand_addr=0x64010100, 0x4e21, 0x7, 'none\x00', 0x4, 0x7ffc, 0x52}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x10000, 0x2, 0xa5a9, 0x100}}, 0x44) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20, 0xfffffffffffffffe, 0x6}, 0x20) [ 1789.171040][ T4826] syz-executor.4 invoked oom-killer: gfp_mask=0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1789.214384][ T4847] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 1789.247360][ T4826] CPU: 1 PID: 4826 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1789.256325][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.266391][ T4826] Call Trace: [ 1789.269706][ T4826] dump_stack+0x188/0x20d [ 1789.274059][ T4826] dump_header+0x10b/0x826 [ 1789.278506][ T4826] oom_kill_process.cold+0x10/0x15 [ 1789.283730][ T4826] out_of_memory+0x31f/0x12f0 [ 1789.288444][ T4826] ? oom_killer_disable+0x270/0x270 [ 1789.293672][ T4826] ? mutex_trylock+0x246/0x2c0 [ 1789.298455][ T4826] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1789.305178][ T4826] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1789.309869][ T4847] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20001 [ 1789.311791][ T4826] ? warn_alloc+0x110/0x110 [ 1789.311832][ T4826] __alloc_pages_nodemask+0x5d9/0x810 [ 1789.311850][ T4826] ? mutex_trylock+0x2c0/0x2c0 [ 1789.311868][ T4826] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1789.311893][ T4826] ? smp_apic_timer_interrupt+0x1b6/0x600 [ 1789.345884][ T4826] ? retint_kernel+0x2b/0x2b [ 1789.350488][ T4826] ? wait_for_completion+0x270/0x270 [ 1789.355791][ T4826] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1789.362235][ T4826] alloc_pages_current+0xff/0x200 [ 1789.367280][ T4826] ion_page_pool_alloc+0x186/0x280 [ 1789.372497][ T4826] ion_system_heap_allocate+0x321/0xb00 [ 1789.378065][ T4826] ? ion_system_heap_free+0x240/0x240 [ 1789.383503][ T4826] ? lockdep_hardirqs_on+0x463/0x620 [ 1789.388807][ T4826] ion_ioctl+0x37a/0xca0 [ 1789.393077][ T4826] ? _ion_buffer_destroy+0xa0/0xa0 [ 1789.398217][ T4826] ? ksys_dup3+0x3c0/0x3c0 [ 1789.402661][ T4826] ? __x64_sys_futex+0x380/0x4f0 [ 1789.407617][ T4826] ? _ion_buffer_destroy+0xa0/0xa0 [ 1789.412931][ T4826] ksys_ioctl+0x11a/0x180 [ 1789.417296][ T4826] __x64_sys_ioctl+0x6f/0xb0 [ 1789.421903][ T4826] ? lockdep_hardirqs_on+0x463/0x620 [ 1789.427211][ T4826] do_syscall_64+0xf6/0x7d0 [ 1789.431744][ T4826] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1789.437669][ T4826] RIP: 0033:0x45c829 [ 1789.441581][ T4826] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1789.461224][ T4826] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1789.469651][ T4826] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1789.477648][ T4826] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1789.485721][ T4826] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1789.493791][ T4826] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1789.501872][ T4826] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:43:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000300), &(0x7f0000000340)=0x4) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:27 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x4020ae46, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xc2000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:27 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1790.381899][ T4826] Mem-Info: [ 1790.389822][ T4826] active_anon:224477 inactive_anon:6176 isolated_anon:0 [ 1790.389822][ T4826] active_file:1081 inactive_file:7826 isolated_file:0 [ 1790.389822][ T4826] unevictable:0 dirty:23 writeback:0 unstable:0 [ 1790.389822][ T4826] slab_reclaimable:19054 slab_unreclaimable:160212 [ 1790.389822][ T4826] mapped:58777 shmem:6419 pagetables:4011 bounce:0 [ 1790.389822][ T4826] free:317376 free_pcp:261 free_cma:0 [ 1790.481218][ T4826] Node 0 active_anon:826784kB inactive_anon:16464kB active_file:8kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216540kB dirty:8kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 253952kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1790.634392][ T4826] Node 0 DMA free:10324kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2240kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.701132][ T4826] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1790.725989][ T4826] Node 0 DMA32 free:101768kB min:93276kB low:102256kB high:111236kB reserved_highatomic:0KB active_anon:822496kB inactive_anon:16464kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10736kB pagetables:12260kB bounce:0kB free_pcp:924kB local_pcp:532kB free_cma:0kB [ 1790.797045][ T4826] lowmem_reserve[]: 0 0 0 0 0 [ 1790.808484][ T4826] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1790.868775][ T4826] lowmem_reserve[]: 0 0 0 0 0 [ 1790.879725][ T4826] Node 0 DMA: 27*4kB (UME) 13*8kB (UME) 18*16kB (UE) 23*32kB (UME) 2*64kB (U) 6*128kB (U) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10324kB [ 1790.917995][ T4826] Node 0 DMA32: 4496*4kB (UME) 1247*8kB (UME) 602*16kB (UME) 438*32kB (UME) 44*64kB (UME) 195*128kB (UM) 69*256kB (UM) 3*512kB (M) 0*1024kB 1*2048kB (M) 0*4096kB = 100632kB [ 1790.954831][ T4826] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1790.981319][ T4826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1791.006562][ T4826] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1791.027469][ T4826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1791.052312][ T4826] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1791.079595][ T4826] 11954 total pagecache pages [ 1791.094632][ T4826] 0 pages in swap cache [ 1791.107823][ T4826] Swap cache stats: add 0, delete 0, find 0/0 [ 1791.127650][ T4826] Free swap = 0kB [ 1791.139794][ T4826] Total swap = 0kB [ 1791.149416][ T4826] 1965979 pages RAM [ 1791.160809][ T4826] 0 pages HighMem/MovableOnly [ 1791.175135][ T4826] 349380 pages reserved [ 1791.187639][ T4826] 0 pages cma reserved [ 1791.197914][ T4826] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=22816,uid=0 [ 1791.220634][ T4826] Out of memory: Killed process 22816 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1791.518636][ T1143] oom_reaper: reaped process 4826 (syz-executor.4), now anon-rss:0kB, file-rss:34780kB, shmem-rss:0kB 17:43:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x41a0ae8d, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:29 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x3000000}) 17:43:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x101f8, 0x9, 0x0, 0x0, 0x77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x3f) r0 = open$dir(&(0x7f0000000100)='./bus\x00', 0x0, 0x17e) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x0, @private1, 0x5}], 0x1c) sendto$inet(0xffffffffffffffff, &(0x7f0000000480)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x59, 0x20040000, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000), &(0x7f0000000040)=0x5d) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000300)='#\'securitytrusted{$\x00', &(0x7f0000000340)='/\x00', &(0x7f00000007c0)='\x00', &(0x7f00000003c0)='vmnet0\'trusted$)&- selinux{[-\'keyring@\x00', &(0x7f0000000400)='[]:[\x00', &(0x7f0000000440)='keyring:]:**(/GPL-em1lo\x00', &(0x7f0000000380)='\xcd\xac/\x16\x91L\xf5A\x1b\x98\r\x01\x006\xce\xb7 Fez\xff\x1b', &(0x7f00000004c0)='nodev\x00'], &(0x7f0000000740)=[&(0x7f0000000540)=',&md5sum+ppp0#@Z\x88\x10\ve>\x96', &(0x7f0000000580)='\x00', &(0x7f00000005c0)='trusted]]\x04ppp1.usercgroupuservmnet0\x00', &(0x7f0000000600)='%keyring*!\x00', &(0x7f0000000640)=']^jlan0]\x00', &(0x7f0000000680)='yring+trusted&user}vboxnet1posix_acl_access\xffmd5sum\x00', &(0x7f0000000700)='\x00']) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x20004fea}, &(0x7f0000000140)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'hsr0\x00', {0xfff}, 0x8}) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000780)={0x20, 0x0, 0x3}, 0x1c) 17:43:29 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_send_signal(r1, 0xb, &(0x7f0000000040)={0x21, 0x0, 0x4}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0xad}}}, 0x88) 17:43:29 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010003, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xc2010000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0x80086301, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1792.319091][ T4887] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1792.333614][ T4887] CPU: 0 PID: 4887 Comm: syz-executor.1 Not tainted 5.7.0-rc4-syzkaller #0 [ 1792.342231][ T4887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.352404][ T4887] Call Trace: [ 1792.355749][ T4887] dump_stack+0x188/0x20d [ 1792.360100][ T4887] dump_header+0x10b/0x826 [ 1792.365527][ T4887] oom_kill_process.cold+0x10/0x15 [ 1792.365547][ T4887] out_of_memory+0x31f/0x12f0 [ 1792.365572][ T4887] ? oom_killer_disable+0x270/0x270 [ 1792.365593][ T4887] ? mutex_trylock+0x246/0x2c0 [ 1792.365608][ T4887] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1792.365630][ T4887] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1792.365667][ T4887] ? warn_alloc+0x110/0x110 [ 1792.365717][ T4887] __alloc_pages_nodemask+0x5d9/0x810 [ 1792.365737][ T4887] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1792.365754][ T4887] ? print_usage_bug+0x240/0x240 [ 1792.365774][ T4887] ? __lock_acquire+0x2184/0x4c50 [ 1792.365796][ T4887] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1792.365821][ T4887] alloc_pages_vma+0xd9/0x600 [ 1792.436755][ T4887] wp_page_copy+0x20b/0x16a0 [ 1792.436779][ T4887] ? do_wp_page+0x590/0x1440 [ 1792.436792][ T4887] ? follow_pfn+0x250/0x250 [ 1792.436811][ T4887] ? lock_downgrade+0x840/0x840 [ 1792.455822][ T4887] ? vm_normal_page+0x14d/0x380 [ 1792.455844][ T4887] ? __handle_mm_fault+0x189c/0x3c90 [ 1792.455866][ T4887] do_wp_page+0x598/0x1440 [ 1792.455886][ T4887] ? finish_mkwrite_fault+0x5b0/0x5b0 [ 1792.455899][ T4887] ? rwlock_bug.part.0+0x90/0x90 [ 1792.455915][ T4887] ? fault_around_bytes_set+0x90/0x90 [ 1792.455937][ T4887] __handle_mm_fault+0x2381/0x3c90 [ 1792.455958][ T4887] ? vm_insert_pages+0x6a0/0x6a0 [ 1792.455971][ T4887] ? count_memcg_event_mm+0x1e2/0x3d0 [ 1792.455995][ T4887] ? mark_held_locks+0x9f/0xe0 [ 1792.456018][ T4887] handle_mm_fault+0x1a5/0x660 [ 1792.456040][ T4887] do_page_fault+0x55b/0x13da [ 1792.456071][ T4887] page_fault+0x39/0x40 [ 1792.456090][ T4887] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 1792.456106][ T4887] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 1792.456114][ T4887] RSP: 0018:ffffc90004107b40 EFLAGS: 00010206 [ 1792.456128][ T4887] RAX: 0000000000000001 RBX: 000000000073b058 RCX: 0000000000000005 [ 1792.456137][ T4887] RDX: 0000000000000000 RSI: ffffc90004107bd0 RDI: 000000000073b058 [ 1792.456147][ T4887] RBP: ffffc90004107bd0 R08: 0000000000006f6c R09: fffff52000820f7f [ 1792.456157][ T4887] R10: ffffc90004107bf7 R11: fffff52000820f7e R12: 0000000000000028 [ 1792.456166][ T4887] R13: 000000000073b080 R14: 00007ffffffff000 R15: 0000000000000000 [ 1792.456199][ T4887] _copy_to_user+0x11e/0x160 [ 1792.456221][ T4887] inet_gifconf+0x23c/0x490 [ 1792.456241][ T4887] ? inet_set_link_af+0x3f0/0x3f0 [ 1792.456276][ T4887] ? inet_set_link_af+0x3f0/0x3f0 [ 1792.456294][ T4887] dev_ifconf+0xd3/0x230 [ 1792.456318][ T4887] sock_do_ioctl+0x260/0x2f0 [ 1792.456337][ T4887] ? compat_ifr_data_ioctl+0x160/0x160 [ 1792.456356][ T4887] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1792.456373][ T4887] ? do_vfs_ioctl+0x50c/0x1360 [ 1792.456393][ T4887] ? ioctl_file_clone+0x180/0x180 [ 1792.456414][ T4887] sock_ioctl+0x3ec/0x790 [ 1792.456431][ T4887] ? dlci_ioctl_set+0x30/0x30 [ 1792.456451][ T4887] ? ksys_dup3+0x3c0/0x3c0 [ 1792.655637][ T4887] ? __x64_sys_futex+0x380/0x4f0 [ 1792.655662][ T4887] ? dlci_ioctl_set+0x30/0x30 [ 1792.665263][ T4887] ksys_ioctl+0x11a/0x180 [ 1792.669607][ T4887] __x64_sys_ioctl+0x6f/0xb0 [ 1792.674215][ T4887] ? lockdep_hardirqs_on+0x463/0x620 [ 1792.679785][ T4887] do_syscall_64+0xf6/0x7d0 [ 1792.684309][ T4887] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1792.690204][ T4887] RIP: 0033:0x45c829 [ 1792.694113][ T4887] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1792.713726][ T4887] RSP: 002b:00007f20a9284c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.722152][ T4887] RAX: ffffffffffffffda RBX: 00000000004e8f00 RCX: 000000000045c829 [ 1792.730168][ T4887] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000004 [ 1792.738186][ T4887] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1792.746172][ T4887] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1792.754151][ T4887] R13: 000000000000040f R14: 00000000004c6afa R15: 00007f20a92856d4 17:43:30 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x3000000}) 17:43:30 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:30 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010006, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1792.849842][ T4887] Mem-Info: [ 1792.857961][ T4887] active_anon:219943 inactive_anon:6176 isolated_anon:0 [ 1792.857961][ T4887] active_file:1083 inactive_file:9796 isolated_file:0 [ 1792.857961][ T4887] unevictable:0 dirty:9 writeback:0 unstable:0 [ 1792.857961][ T4887] slab_reclaimable:19383 slab_unreclaimable:159756 [ 1792.857961][ T4887] mapped:58782 shmem:6419 pagetables:3982 bounce:0 [ 1792.857961][ T4887] free:261067 free_pcp:429 free_cma:0 17:43:30 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010008, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) [ 1792.966658][ T4887] Node 0 active_anon:818388kB inactive_anon:16464kB active_file:12kB inactive_file:2004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216540kB dirty:4kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 249856kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes 17:43:30 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x300, 0xffffffffffffffff, 0x3000000}) [ 1793.024308][ T4887] Node 0 DMA free:10172kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:2040kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1793.106787][ T4887] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1793.125718][ T4887] Node 0 DMA32 free:42084kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:816360kB inactive_anon:16464kB active_file:12kB inactive_file:4004kB unevictable:0kB writepending:4kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10744kB pagetables:12068kB bounce:0kB free_pcp:2348kB local_pcp:1008kB free_cma:0kB 17:43:30 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x500, 0xffffffffffffffff, 0x3000000}) [ 1793.250237][ T4887] lowmem_reserve[]: 0 0 0 0 0 [ 1793.257273][ T4887] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 17:43:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1002, 0x44) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400040052cf544eaff3e55d755036221f304ff39eb76bdefda9f8e6", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250a00000008000400ff0700001c00028005000d000000000008000700ff0f000008000300040000001c000280060002004e21000008000600070000000800040000000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000014}, 0x4000000) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1793.333599][ T4887] lowmem_reserve[]: 0 0 0 0 0 [ 1793.346877][ T4887] Node 0 DMA: 13*4kB (UME) 17*8kB (ME) 8*16kB (UME) 20*32kB (UME) 2*64kB (U) 7*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (U) 0*4096kB = 10172kB [ 1793.389414][ T4887] Node 0 DMA32: 1721*4kB (UME) 459*8kB (UME) 138*16kB (UME) 44*32kB (ME) 48*64kB (ME) 33*128kB (UM) 48*256kB (UM) 4*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 35804kB [ 1793.429834][ T4887] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1793.462170][ T4887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1793.500406][ T4887] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1793.538242][ T4887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1793.579820][ T4887] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1793.617837][ T4887] 11957 total pagecache pages [ 1793.640996][ T4887] 0 pages in swap cache [ 1793.657865][ T4916] warn_alloc: 4 callbacks suppressed [ 1793.657885][ T4916] syz-executor.4: page allocation failure: order:4, mode:0x140dc2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=0,cpuset=/,mems_allowed=0-1 [ 1793.681861][ T4887] Swap cache stats: add 0, delete 0, find 0/0 [ 1793.697507][ T4887] Free swap = 0kB [ 1793.708468][ T4887] Total swap = 0kB [ 1793.719778][ T4887] 1965979 pages RAM [ 1793.729740][ T4887] 0 pages HighMem/MovableOnly [ 1793.738843][ T4916] CPU: 0 PID: 4916 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1793.747453][ T4916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.757543][ T4916] Call Trace: [ 1793.760851][ T4916] dump_stack+0x188/0x20d [ 1793.765201][ T4916] warn_alloc.cold+0x87/0x164 [ 1793.769902][ T4916] ? zone_watermark_ok_safe+0x260/0x260 [ 1793.775464][ T4916] ? ___might_sleep+0x15a/0x2b0 [ 1793.780339][ T4916] ? __alloc_pages_direct_compact+0x366/0x420 [ 1793.781094][ T4887] 349380 pages reserved [ 1793.786426][ T4916] ? get_page_from_freelist+0x3580/0x3580 [ 1793.786453][ T4916] __alloc_pages_slowpath.constprop.0+0x20bf/0x2660 [ 1793.786472][ T4916] ? get_page_from_freelist+0x1767/0x3580 [ 1793.786502][ T4916] ? warn_alloc+0x110/0x110 [ 1793.786528][ T4916] ? __isolate_free_page+0x610/0x610 [ 1793.786555][ T4916] __alloc_pages_nodemask+0x5d9/0x810 [ 1793.786572][ T4916] ? mutex_trylock+0x2c0/0x2c0 [ 1793.786589][ T4916] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1793.786617][ T4916] ? mark_lock+0x12b/0xf10 [ 1793.786632][ T4916] ? wait_for_completion+0x270/0x270 [ 1793.786650][ T4916] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1793.786674][ T4916] alloc_pages_current+0xff/0x200 [ 1793.786697][ T4916] ion_page_pool_alloc+0x186/0x280 [ 1793.786721][ T4916] ion_system_heap_allocate+0x321/0xb00 [ 1793.786745][ T4916] ? ion_system_heap_free+0x240/0x240 [ 1793.786758][ T4916] ? kfree+0x1eb/0x2b0 [ 1793.786773][ T4916] ? ion_ioctl+0x9da/0xca0 [ 1793.786788][ T4916] ? lockdep_hardirqs_on+0x463/0x620 [ 1793.786805][ T4916] ion_ioctl+0x37a/0xca0 [ 1793.786829][ T4916] ? _ion_buffer_destroy+0xa0/0xa0 [ 1793.809586][ T4887] 0 pages cma reserved [ 1793.813524][ T4916] ? ksys_dup3+0x3c0/0x3c0 [ 1793.813545][ T4916] ? __x64_sys_futex+0x380/0x4f0 [ 1793.846804][ T4887] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=22743,uid=0 [ 1793.851788][ T4916] ? _ion_buffer_destroy+0xa0/0xa0 [ 1793.851805][ T4916] ksys_ioctl+0x11a/0x180 [ 1793.851824][ T4916] __x64_sys_ioctl+0x6f/0xb0 [ 1793.886334][ T4887] Out of memory: Killed process 22743 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 1793.890766][ T4916] ? lockdep_hardirqs_on+0x463/0x620 [ 1793.890787][ T4916] do_syscall_64+0xf6/0x7d0 [ 1793.890810][ T4916] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1793.970457][ T4916] RIP: 0033:0x45c829 [ 1793.974525][ T4916] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1793.994141][ T4916] RSP: 002b:00007fea8ef0ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.002562][ T4916] RAX: ffffffffffffffda RBX: 00000000004e64c0 RCX: 000000000045c829 [ 1794.010631][ T4916] RDX: 0000000020000000 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1794.018629][ T4916] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1794.026610][ T4916] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1794.034594][ T4916] R13: 0000000000000366 R14: 00000000004c5d63 R15: 00007fea8ef0f6d4 17:43:31 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$rds(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x4e22, @remote}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0x0, 0x7, {0x2}}, 0x18) r4 = dup2(r3, r3) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1794.373699][ T4916] Mem-Info: [ 1794.385229][ T4916] active_anon:217879 inactive_anon:6176 isolated_anon:0 [ 1794.385229][ T4916] active_file:1085 inactive_file:9292 isolated_file:1 [ 1794.385229][ T4916] unevictable:0 dirty:14 writeback:0 unstable:0 [ 1794.385229][ T4916] slab_reclaimable:19391 slab_unreclaimable:160341 [ 1794.385229][ T4916] mapped:58788 shmem:6419 pagetables:3954 bounce:0 [ 1794.385229][ T4916] free:162058 free_pcp:375 free_cma:0 [ 1794.540024][ T4916] Node 0 active_anon:805024kB inactive_anon:16464kB active_file:12kB inactive_file:1008kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216552kB dirty:8kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 1794.668140][ T4916] Node 0 DMA free:10232kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1988kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1794.707160][ T1143] oom_reaper: reaped process 4887 (syz-executor.1), now anon-rss:0kB, file-rss:34796kB, shmem-rss:0kB [ 1794.798041][ T4916] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1794.824298][ T4916] Node 0 DMA32 free:27904kB min:35932kB low:44912kB high:53892kB reserved_highatomic:0KB active_anon:801916kB inactive_anon:16464kB active_file:12kB inactive_file:92kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10704kB pagetables:11964kB bounce:0kB free_pcp:112kB local_pcp:12kB free_cma:0kB [ 1794.961146][ T4916] lowmem_reserve[]: 0 0 0 0 0 [ 1794.982330][ T4916] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1795.102992][ T4916] lowmem_reserve[]: 0 0 0 0 0 [ 1795.122934][ T4916] Node 0 DMA: 9*4kB (ME) 15*8kB (ME) 6*16kB (ME) 18*32kB (UE) 2*64kB (U) 6*128kB (U) 3*256kB (U) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10172kB [ 1795.193726][ T4916] Node 0 DMA32: 750*4kB (UME) 431*8kB (UME) 95*16kB (ME) 40*32kB (ME) 37*64kB (ME) 29*128kB (M) 16*256kB (M) 3*512kB (M) 0*1024kB 0*2048kB 0*4096kB = 20960kB [ 1795.258882][ T4916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1795.307491][ T4916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.350051][ T4916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.383175][ T4916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1795.427803][ T4916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1795.465582][ T4916] 11971 total pagecache pages [ 1795.487311][ T4916] 0 pages in swap cache [ 1795.506366][ T4916] Swap cache stats: add 0, delete 0, find 0/0 [ 1795.532816][ T4916] Free swap = 0kB [ 1795.544817][ T4916] Total swap = 0kB [ 1795.561971][ T4916] 1965979 pages RAM [ 1795.583127][ T4916] 0 pages HighMem/MovableOnly [ 1795.605290][ T4916] 349380 pages reserved [ 1795.620216][ T4916] 0 pages cma reserved [ 1795.864573][ T1143] oom_reaper: reaped process 4916 (syz-executor.4), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB 17:43:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b48, &(0x7f0000000580)={0x1, 0x0, 0x1, 0xc, 0x0, 0x0}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)={0x5, 0x3, 0x1, 0x0, 0x1000000}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:33 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xc3ffffff, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:33 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x600, 0xffffffffffffffff, 0x3000000}) [ 1796.276959][ T4939] syz-executor.4 invoked oom-killer: gfp_mask=0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 1796.341492][ T4939] CPU: 0 PID: 4939 Comm: syz-executor.4 Not tainted 5.7.0-rc4-syzkaller #0 [ 1796.350125][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.360188][ T4939] Call Trace: [ 1796.363496][ T4939] dump_stack+0x188/0x20d [ 1796.367841][ T4939] dump_header+0x10b/0x826 [ 1796.372286][ T4939] oom_kill_process.cold+0x10/0x15 [ 1796.377414][ T4939] out_of_memory+0x31f/0x12f0 [ 1796.382119][ T4939] ? oom_killer_disable+0x270/0x270 17:43:34 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x4, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r6, 0x0, 0x300}}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={r7, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000300)={r7, 0xc5, "5edda82989c51314523a72e4c5a4fd6c7eeaea8fc0676713dc2d7d75f0bff526b1b0d92d79e898ef851d0cf403327770ffdd57239560e42210a0c1d0d4277a25bbf9b316641d333b4489cee7d5999471911647c2294ac65757877113f1eb420cdc3c514ad318e4455e361cb584c26ff35f6465d06c1ab85a87e2340cd1d70b3df15c2845b5d38d9d1262b2961de622f2edf34d4e165d3a3b81de02f14f1e40f4c592007017f0dc5726e5000ce396a0c14cdf33363e8a1850ce2ca63b6bbe5bec55436dcdf1"}, &(0x7f0000000280)=0xcd) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), r6, r2}}, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind(r2, &(0x7f0000000040)=@caif=@dgm={0x25, 0xfffff228, 0x4}, 0x80) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000140)={0x2, {{0xa, 0x4e23, 0x0, @empty}}}, 0x88) dup(r8) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1796.387339][ T4939] ? mutex_trylock+0x246/0x2c0 [ 1796.392109][ T4939] ? __alloc_pages_slowpath.constprop.0+0xbe1/0x2660 [ 1796.398797][ T4939] __alloc_pages_slowpath.constprop.0+0x1f74/0x2660 [ 1796.405429][ T4939] ? warn_alloc+0x110/0x110 [ 1796.409946][ T4939] ? do_filp_open+0x192/0x260 [ 1796.414654][ T4939] __alloc_pages_nodemask+0x5d9/0x810 [ 1796.420048][ T4939] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1796.425616][ T4939] ? __alloc_pages_slowpath.constprop.0+0x2660/0x2660 [ 1796.432391][ T4939] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 1796.438219][ T4939] ? kmem_cache_alloc_node_trace+0x3a2/0x790 [ 1796.444216][ T4939] ? do_raw_spin_unlock+0x171/0x260 [ 1796.449431][ T4939] ? cpuset_nodemask_valid_mems_allowed+0x5c/0x80 [ 1796.455871][ T4939] alloc_pages_current+0xff/0x200 [ 1796.460904][ T4939] __vmalloc_node_range+0x478/0x7a0 [ 1796.466114][ T4939] ? n_tty_open+0x16/0x170 [ 1796.470539][ T4939] vzalloc+0x67/0x80 [ 1796.474452][ T4939] ? n_tty_open+0x16/0x170 [ 1796.478878][ T4939] n_tty_open+0x16/0x170 [ 1796.483128][ T4939] ? n_tty_set_termios+0x1010/0x1010 [ 1796.488535][ T4939] tty_ldisc_open.isra.0+0x9b/0x110 [ 1796.493748][ T4939] tty_ldisc_setup+0x43/0x100 [ 1796.498440][ T4939] tty_init_dev+0x20c/0x460 [ 1796.503129][ T4939] tty_open+0x48b/0xb40 [ 1796.512087][ T4939] ? kobject_init+0x1a0/0x1a0 [ 1796.516788][ T4939] ? do_raw_spin_lock+0x129/0x2e0 [ 1796.521826][ T4939] ? tty_init_dev+0x460/0x460 [ 1796.526505][ T4939] ? rwlock_bug.part.0+0x90/0x90 [ 1796.531477][ T4939] ? tty_init_dev+0x460/0x460 [ 1796.536157][ T4939] chrdev_open+0x219/0x5c0 [ 1796.540593][ T4939] ? cdev_put.part.0+0x50/0x50 [ 1796.545367][ T4939] ? security_file_open+0x84/0x410 [ 1796.550491][ T4939] do_dentry_open+0x4ba/0x1290 [ 1796.555269][ T4939] ? cdev_put.part.0+0x50/0x50 [ 1796.560042][ T4939] ? security_inode_permission+0xc4/0xf0 [ 1796.565685][ T4939] ? chown_common+0x550/0x550 [ 1796.570393][ T4939] ? inode_permission+0xab/0x500 [ 1796.575340][ T4939] path_openat+0x1e59/0x27d0 [ 1796.579942][ T4939] ? path_lookupat.isra.0+0x530/0x530 [ 1796.585340][ T4939] do_filp_open+0x192/0x260 [ 1796.589863][ T4939] ? may_open_dev+0xf0/0xf0 [ 1796.594409][ T4939] ? _raw_spin_unlock+0x24/0x40 [ 1796.599271][ T4939] ? __alloc_fd+0x46d/0x600 [ 1796.603791][ T4939] do_sys_openat2+0x585/0x7d0 [ 1796.608484][ T4939] ? file_open_root+0x400/0x400 [ 1796.613334][ T4939] ? _copy_to_user+0x126/0x160 [ 1796.618115][ T4939] ? put_timespec64+0xcb/0x120 [ 1796.622902][ T4939] ? ns_to_kernel_old_timeval+0x100/0x100 [ 1796.628677][ T4939] do_sys_open+0xc3/0x140 [ 1796.633020][ T4939] ? filp_open+0x70/0x70 [ 1796.637278][ T4939] ? __ia32_sys_clock_settime+0x260/0x260 [ 1796.643010][ T4939] ? trace_hardirqs_off_caller+0x55/0x230 [ 1796.648834][ T4939] do_syscall_64+0xf6/0x7d0 [ 1796.653363][ T4939] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 1796.659257][ T4939] RIP: 0033:0x416621 [ 1796.663164][ T4939] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1796.682793][ T4939] RSP: 002b:00007fea8ef0e7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 1796.691209][ T4939] RAX: ffffffffffffffda RBX: 0000000000509000 RCX: 0000000000416621 [ 1796.699191][ T4939] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 00007fea8ef0e7d0 [ 1796.707178][ T4939] RBP: 000000000078bf00 R08: 0000000000000000 R09: 000000000000000e [ 1796.715190][ T4939] R10: 0000000000000064 R11: 0000000000000293 R12: 00000000ffffffff [ 1796.723161][ T4939] R13: 0000000000000c13 R14: 00000000004ce3f3 R15: 00007fea8ef0f6d4 [ 1796.797994][ T4939] Mem-Info: [ 1796.801369][ T4939] active_anon:214949 inactive_anon:6176 isolated_anon:0 [ 1796.801369][ T4939] active_file:1086 inactive_file:11652 isolated_file:0 [ 1796.801369][ T4939] unevictable:0 dirty:28 writeback:0 unstable:0 [ 1796.801369][ T4939] slab_reclaimable:19553 slab_unreclaimable:160688 [ 1796.801369][ T4939] mapped:58811 shmem:6419 pagetables:3969 bounce:0 [ 1796.801369][ T4939] free:79928 free_pcp:146 free_cma:0 [ 1796.842577][ T4939] Node 0 active_anon:801732kB inactive_anon:16464kB active_file:12kB inactive_file:1876kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:216552kB dirty:8kB writeback:0kB shmem:17420kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 245760kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no 17:43:34 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xff}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r1, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000340)=0x9, 0x4) splice(r1, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) splice(r0, &(0x7f00000002c0)=0x4, 0xffffffffffffffff, &(0x7f0000000300)=0x6, 0xffffffffffff5d90, 0x9) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1796.875223][ T4939] Node 0 DMA free:10184kB min:220kB low:272kB high:324kB reserved_highatomic:0KB active_anon:1980kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1796.909148][ T4939] lowmem_reserve[]: 0 2517 2517 2517 2517 [ 1796.916312][ T4939] Node 0 DMA32 free:24716kB min:44124kB low:53104kB high:62084kB reserved_highatomic:0KB active_anon:799752kB inactive_anon:16464kB active_file:12kB inactive_file:1876kB unevictable:0kB writepending:8kB present:3129332kB managed:2580288kB mlocked:0kB kernel_stack:10672kB pagetables:11860kB bounce:0kB free_pcp:608kB local_pcp:348kB free_cma:0kB 17:43:34 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0045878, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1797.019651][ T4939] lowmem_reserve[]: 0 0 0 0 0 [ 1797.025689][ T4939] Node 0 Normal free:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1797.081378][ T4939] lowmem_reserve[]: 0 0 0 0 0 [ 1797.093383][ T4939] Node 0 DMA: 10*4kB (UME) 16*8kB (UME) 6*16kB (ME) 18*32kB (UE) 2*64kB (U) 6*128kB (U) 3*256kB (U) 3*512kB (UE) 2*1024kB (UE) 2*2048kB (UM) 0*4096kB = 10184kB [ 1797.124428][ T4939] Node 0 DMA32: 833*4kB (ME) 714*8kB (UME) 136*16kB (UME) 52*32kB (UME) 38*64kB (UME) 29*128kB (UM) 16*256kB (UM) 3*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 24660kB [ 1797.177325][ T4939] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1797.210894][ T4939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.228163][ T4939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.240676][ T4939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1797.280109][ T4939] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1797.311085][ T4939] 11974 total pagecache pages [ 1797.326169][ T4939] 0 pages in swap cache [ 1797.339124][ T4939] Swap cache stats: add 0, delete 0, find 0/0 [ 1797.360154][ T4939] Free swap = 0kB [ 1797.372622][ T4939] Total swap = 0kB [ 1797.386798][ T4939] 1965979 pages RAM [ 1797.398751][ T4939] 0 pages HighMem/MovableOnly [ 1797.413426][ T4939] 349380 pages reserved [ 1797.427542][ T4939] 0 pages cma reserved [ 1797.445634][ T4939] oom-kill:constraint=CONSTRAINT_MEMORY_POLICY,nodemask=0,cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/,task=syz-executor.2,pid=22458,uid=0 [ 1797.478865][ T4939] Out of memory: Killed process 22458 (syz-executor.2) total-vm:75104kB, anon-rss:2212kB, file-rss:34816kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 17:43:36 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010010, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @remote}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000300)={0x54c, 0x12, 0x0, 0x70bd2b, 0x25dfdbfb, {0x2c, 0x80, 0x0, 0x1, {0x4e21, 0x4e22, [0xffff9636, 0xfffff13b, 0x2, 0xebeb5ed1], [0x0, 0x2, 0x2, 0x1], 0x0, [0x0, 0xfff]}, 0xf47d, 0xfffffffc}, [@INET_DIAG_REQ_BYTECODE={0x90, 0x1, "d906cd97c39e96798622ff3c61dc3b33a57a9373b715e0ee8442bdbd1075ad88e72cebe7264b65e5524846537dfc886b61be60a367c54bb18286d00ec2f7474d7a28a2a9c597b314bd8af06e375d3870014eea9288ddabed2da1fc8cf423738d06c3464bb379000d661587c25915a1e7d4d9bbc368bfa82483cb890bdd42cd31c96cddcfb3259cfb6592dfbb"}, @INET_DIAG_REQ_BYTECODE={0xfe, 0x1, "d2f86195ee4e51e6215378eb01a8f6fa06d82ca1df287046221c78d61cefe5543094526056850b2767ee20fbafb44ca42681af475512761fba6ad9937fb3b6b735f0268c5d88a0d566177ed9c25533ca679f3fd45f2ecacb94bfab1e97bd1c8a70c12107dac7c04fd1be36b1d587f92012faba8ac2cbe45d7a1d37ff0af7b455d8fdb7fde1bf5d885b872a5564495c283613877e783c5dfc6921a29d0fda386f40d21bea3869efcc5a69f37199d7486f19a76ed0b5732c4a96b07ad9150ba59c25a5a90f957395b27935c3b7ac2bc8a17236472efdf960f2dd63611c4a6c45d109708da14fe7f46b28480d06f0707fdada4ab346d4413c44d7c6"}, @INET_DIAG_REQ_BYTECODE={0x68, 0x1, "9916888576332cb1a40f67beca3c195287c2d851e93dad15027dc5cd3d3392ca8fe37cd98d1869f02bbe321ad4416fc0b51753f6e03d406bd1e853025a781d5d9baa12cd596719af774c15ee6fe2619a531785d722b633011fc085f43c682f915bb69fc4"}, @INET_DIAG_REQ_BYTECODE={0x79, 0x1, "bb66e95176c0fc9b84ec1c3116490763dc04c0ee5fd93528390631ddff5652f9be226702a40b9df4224f554ebc16fa296fcf1df1596465d6ba9550cfd21ea587aea9bb288f9e9d29dfb7faf1f39b32c8c5b32ce4a2010a332487446310f3a843177165ee117233e9433f891b9694eedb12ffeb52a6"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "813b1eafedd80ea5329930b82fbbf387a2303bbfa6459671512edf7e41"}, @INET_DIAG_REQ_BYTECODE={0x10, 0x1, "5399bd076a4b60c20d5fae3c"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "6ca02fcb8b03e4109f843f17dea9a2f6a0385b44f7d816425d7ce6f42ef1b285d4d302a81a2b841dd7fc1b6309c976af2a203324e4fa2d4ecfaec9bffaf96aa28397f494dc3492b4ad7325739c555598ab879c3363366a88577fec577b29c92a4cd855cea6a6554efcda7128597d38275e8bb80c93855be5708e18a8fdbac02b8d3ed51eb9dafbc48180d8f524232d7802322550bbc104a4ab1ac31a9a66dd50a54566d7b2ff60be31b97fba40c45a697a9b3b2504b4fbc5bde75329c18a11df4321691944e970ebe625ffe6a4f11c19307649477bdd6f9ca8c464"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "e8e9dda2d903d41af45c776f8aa4b318de6dbac04887ec12c57124a15fbdce72d31210e78668b76e43af2fe63752e39319cbf76dfd3a2c3e9d7da009bc0c0313eba5a0160048a4e4ac64db605739c08bc4448283f5753764ab3e57a8e09036ccfb5954887d11b6d446e2f6719e09d2614dd30de664f66b0697b0d2899ed21b65e9ba2ffef219e661e598"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "2019c48f5bbea944dc18b2932a668c29b803d66a2f306db3caf632587507d51afc2037b80df1819ba3360cf743e4b26d3f9a54e21777a368924fcac64cdb98b78e97dc98ae"}, @INET_DIAG_REQ_BYTECODE={0x99, 0x1, "044827366d3a899aff3add35cbefc5537f1384d002ab230d25e1de933b3b73bcfc9e1a8be84d67a3abe0b32931f8943699222ceefa4610787c3f03e28c14e54f12a1536a6645c30fbbcb7bac74562982184aa3d43fd8c224831b6fabf7f75f45c4d41264e37e6b7253822786545c1eb9bfb9a9e512b81e3ed0cf2f04976b4f95161ffe7f56fd167362013785355c020763fb794d3e"}]}, 0x54c}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xd4000000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:36 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 17:43:36 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184902, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:36 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x700, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x4000, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x725, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10, 0x0, 0x5}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0xff00, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xa, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:37 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@generic={0x1f, "91ac5ddce7d1987e001b7c89f02cc2188b6c0e91fd6b4bc29ff4c117d3614cdc90390a72fd8a4c9fcf2355e9cbf38f7628700c5c3d82edfd96bf1c7644133c6f85c226471d205a1f4dc3e498c30d403f110ed7c9dde721a65f13143197e029171cbe0d9e2264af845e43f4122f9d7673d134611dc378dcfd359c0ccf2614"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6ac7c4b7903993c780ea0c2929e6f5a8f1060ef30656d1f6de0336e1ee43db2cc5e64fc31fd04bb8d79c5eff0a34cdfb96c018d3a44af9f4e3be20bad2165ec3b7d6bbe9ee494ba780a46621c9ec2151472e407e4d4b04a29e61d866750d8e3e88875c4bf6b3336ce6b84b892fa85ef86144b150b91924c723391e81bbb78013ca4c28664bdd40e4b7e8010b40a68c06b16465e34e5247fd73fb8f359579d8401c", 0xa1}], 0x1}, 0x4080) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:37 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x400000, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xd4030000, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:37 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x10, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:37 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184903, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:37 executing program 1: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_send_signal(r1, 0xb, &(0x7f0000000040)={0x21, 0x0, 0x4}, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000100)={0x5, {{0xa, 0x4e24, 0x0, @ipv4={[], [], @broadcast}, 0xad}}}, 0x88) 17:43:38 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x5000000, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f00000002c0)) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184904, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:38 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xa000000, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:38 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0x10000000, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:38 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0xf6a16224d1141734, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000300)={0x0, 0x81, 0x10, 0xffffffffffffffff, 0xc5}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:38 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184905, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) [ 1804.134341][ T1133] INFO: task kworker/u4:5:277 blocked for more than 143 seconds. [ 1804.142093][ T1133] Not tainted 5.7.0-rc4-syzkaller #0 [ 1804.166098][ T1133] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1804.187624][ T1133] kworker/u4:5 D25784 277 2 0x80004000 [ 1804.202554][ T1133] Workqueue: netns cleanup_net [ 1804.214109][ T1133] Call Trace: [ 1804.222430][ T1133] ? __schedule+0x937/0x1ff0 [ 1804.234565][ T1133] ? rwsem_down_write_slowpath+0x90a/0xf90 [ 1804.258767][ T1133] ? __sched_text_start+0x8/0x8 [ 1804.270577][ T1133] schedule+0xd0/0x2a0 [ 1804.280479][ T1133] rwsem_down_write_slowpath+0x706/0xf90 [ 1804.293760][ T1133] ? rwsem_mark_wake+0x8d0/0x8d0 17:43:42 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x80ffff, 0xffffffffffffffff, 0x3000000}) 17:43:42 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000600}) 17:43:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xe4ffffff, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) 17:43:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000040)) set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184906, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000000}) 17:43:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000300)={0x3f, 0x5, 0x8}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x20) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) 17:43:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@generic={0x1f, "91ac5ddce7d1987e001b7c89f02cc2188b6c0e91fd6b4bc29ff4c117d3614cdc90390a72fd8a4c9fcf2355e9cbf38f7628700c5c3d82edfd96bf1c7644133c6f85c226471d205a1f4dc3e498c30d403f110ed7c9dde721a65f13143197e029171cbe0d9e2264af845e43f4122f9d7673d134611dc378dcfd359c0ccf2614"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6ac7c4b7903993c780ea0c2929e6f5a8f1060ef30656d1f6de0336e1ee43db2cc5e64fc31fd04bb8d79c5eff0a34cdfb96c018d3a44af9f4e3be20bad2165ec3b7d6bbe9ee494ba780a46621c9ec2151472e407e4d4b04a29e61d866750d8e3e88875c4bf6b3336ce6b84b892fa85ef86144b150b91924c723391e81bbb78013ca4c28664bdd40e4b7e8010b40a68c06b16465e34e5247fd73fb8f359579d8401c", 0xa1}], 0x1}, 0x4080) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1804.305346][ T1133] ? lock_acquire+0x1f2/0x8f0 [ 1804.316820][ T1133] ? unregister_shrinker+0x9b/0x2c0 [ 1804.330090][ T1133] ? lock_release+0x800/0x800 [ 1804.341706][ T1133] ? idr_replace+0x160/0x160 [ 1804.353340][ T1133] ? down_write+0x137/0x150 [ 1804.393089][ T1133] ? down_write+0xb2/0x150 [ 1804.414838][ T1133] down_write+0x137/0x150 [ 1804.455882][ T1133] ? __down_timeout+0x2d0/0x2d0 [ 1804.505382][ T1133] ? mntput_no_expire+0x180/0xae0 17:43:42 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3000600}) [ 1804.541586][ T1133] unregister_shrinker+0x9b/0x2c0 [ 1804.590007][ T1133] nfsd_reply_cache_shutdown+0x22/0x350 [ 1804.632843][ T1133] nfsd_exit_net+0x189/0x4c0 17:43:42 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x1000000, 0xffffffffffffffff, 0x3000000}) 17:43:42 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @private=0xa010100}, {0x306, @local}, 0x2c, {0x2, 0x4e24, @rand_addr=0x64010101}, 'virt_wifi0\x00'}) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x1fd07f, 0xdc) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1804.669850][ T1133] ? write_recoverydir+0x4e0/0x4e0 [ 1804.707914][ T1133] ops_exit_list.isra.0+0xa8/0x150 17:43:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@generic={0x1f, "91ac5ddce7d1987e001b7c89f02cc2188b6c0e91fd6b4bc29ff4c117d3614cdc90390a72fd8a4c9fcf2355e9cbf38f7628700c5c3d82edfd96bf1c7644133c6f85c226471d205a1f4dc3e498c30d403f110ed7c9dde721a65f13143197e029171cbe0d9e2264af845e43f4122f9d7673d134611dc378dcfd359c0ccf2614"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6ac7c4b7903993c780ea0c2929e6f5a8f1060ef30656d1f6de0336e1ee43db2cc5e64fc31fd04bb8d79c5eff0a34cdfb96c018d3a44af9f4e3be20bad2165ec3b7d6bbe9ee494ba780a46621c9ec2151472e407e4d4b04a29e61d866750d8e3e88875c4bf6b3336ce6b84b892fa85ef86144b150b91924c723391e81bbb78013ca4c28664bdd40e4b7e8010b40a68c06b16465e34e5247fd73fb8f359579d8401c", 0xa1}], 0x1}, 0x4080) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1804.743862][ T1133] cleanup_net+0x511/0xa50 17:43:42 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3000600}) [ 1804.772071][ T1133] ? unregister_pernet_device+0x70/0x70 [ 1804.799766][ T1133] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 1804.828679][ T1133] ? _raw_spin_unlock_irq+0x1f/0x80 [ 1804.858271][ T1133] process_one_work+0x965/0x16a0 [ 1804.892290][ T1133] ? lock_release+0x800/0x800 [ 1804.947465][ T1133] ? pwq_dec_nr_in_flight+0x310/0x310 17:43:42 executing program 4: set_mempolicy(0x2, &(0x7f00000000c0)=0x1, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x2000000, 0xffffffffffffffff, 0x3000000}) [ 1804.995360][ T1133] ? rwlock_bug.part.0+0x90/0x90 [ 1805.028197][ T1133] worker_thread+0x96/0xe20 17:43:42 executing program 3: set_mempolicy(0x2, 0x0, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3000600}) [ 1805.075997][ T1133] ? process_one_work+0x16a0/0x16a0 [ 1805.117243][ T1133] kthread+0x388/0x470 17:43:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x1000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2, 0x0) close(0xffffffffffffffff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r1, &(0x7f0000000280)="3735cefa132a4dd4436de552b33b7d00963f360feb47e6bd5790300710efa622c3338aa2a11ffd3303f29eecd0767545e1ec448cdf", 0x35, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast2}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x6}, &(0x7f00000001c0)=0x8) fchmodat(r0, 0x0, 0xd4) r2 = open(&(0x7f0000000080)='./bus\x00', 0x42202, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f00000002c0)=@generic={0x1f, "91ac5ddce7d1987e001b7c89f02cc2188b6c0e91fd6b4bc29ff4c117d3614cdc90390a72fd8a4c9fcf2355e9cbf38f7628700c5c3d82edfd96bf1c7644133c6f85c226471d205a1f4dc3e498c30d403f110ed7c9dde721a65f13143197e029171cbe0d9e2264af845e43f4122f9d7673d134611dc378dcfd359c0ccf2614"}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)="6ac7c4b7903993c780ea0c2929e6f5a8f1060ef30656d1f6de0336e1ee43db2cc5e64fc31fd04bb8d79c5eff0a34cdfb96c018d3a44af9f4e3be20bad2165ec3b7d6bbe9ee494ba780a46621c9ec2151472e407e4d4b04a29e61d866750d8e3e88875c4bf6b3336ce6b84b892fa85ef86144b150b91924c723391e81bbb78013ca4c28664bdd40e4b7e8010b40a68c06b16465e34e5247fd73fb8f359579d8401c", 0xa1}], 0x1}, 0x4080) splice(r0, 0x0, r2, 0x0, 0x9, 0x0) geteuid() getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0), &(0x7f0000000240)=0x4) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) r4 = dup2(r3, r2) write$FUSE_IOCTL(r4, &(0x7f0000000000)={0x20}, 0x20) [ 1805.144198][ T1133] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1805.161941][ T1133] ret_from_fork+0x24/0x30 [ 1805.201545][ T1133] [ 1805.201545][ T1133] Showing all locks held in the system: [ 1805.229444][ T1133] 4 locks held by kworker/u4:5/277: [ 1805.254052][ T1133] #0: ffff8880a9771938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0 [ 1805.290782][ T1133] #1: ffffc90001817dc0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0 [ 1805.365400][ T1133] #2: ffffffff8a576af0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xa50 [ 1805.381819][ T1133] #3: ffffffff89a404f0 (shrinker_rwsem){++++}-{3:3}, at: unregister_shrinker+0x9b/0x2c0 [ 1805.400679][ T1133] 1 lock held by khungtaskd/1133: [ 1805.428737][ T1133] #0: ffffffff899beb00 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 1805.441003][ T1133] 2 locks held by khugepaged/1149: [ 1805.448472][ T1133] 1 lock held by in:imklog/6771: [ 1805.455484][ T1133] #0: ffff88809f1b3670 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 1805.466615][ T1133] 2 locks held by kworker/u4:7/9027: [ 1805.472439][ T1133] 4 locks held by kworker/u4:9/10718: [ 1805.479728][ T1133] 2 locks held by syz-executor.2/24760: [ 1805.498958][ T1133] #0: ffff88804b3760e0 (&type->s_umount_key#40){++++}-{3:3}, at: deactivate_super+0x185/0x1b0 [ 1805.543976][ T1133] #1: ffffffff89a404f0 (shrinker_rwsem){++++}-{3:3}, at: unregister_memcg_shrinker.isra.0+0x26/0x50 [ 1805.573329][ T1133] 3 locks held by kworker/0:2/3347: [ 1805.579125][ T1133] #0: ffff88809ac3f538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x844/0x16a0 [ 1805.599777][ T1133] #1: ffffc90003e67dc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x878/0x16a0 [ 1805.620759][ T1133] #2: ffffffff8a5829e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa9/0x1280 [ 1805.631584][ T1133] 1 lock held by syz-executor.5/5103: [ 1805.645592][ T1133] #0: ffffffff8a5829e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3f9/0xad0 [ 1805.664622][ T1133] [ 1805.667004][ T1133] ============================================= [ 1805.667004][ T1133] [ 1805.677522][ T1133] NMI backtrace for cpu 0 [ 1805.681868][ T1133] CPU: 0 PID: 1133 Comm: khungtaskd Not tainted 5.7.0-rc4-syzkaller #0 [ 1805.690101][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.700163][ T1133] Call Trace: [ 1805.703467][ T1133] dump_stack+0x188/0x20d [ 1805.707815][ T1133] nmi_cpu_backtrace.cold+0x70/0xb1 [ 1805.713098][ T1133] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1805.718743][ T1133] nmi_trigger_cpumask_backtrace+0x231/0x27e [ 1805.724735][ T1133] watchdog+0xa8c/0x1010 [ 1805.729031][ T1133] ? reset_hung_task_detector+0x30/0x30 [ 1805.734712][ T1133] kthread+0x388/0x470 [ 1805.738785][ T1133] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1805.744510][ T1133] ret_from_fork+0x24/0x30 [ 1805.749391][ T1133] Sending NMI from CPU 0 to CPUs 1: [ 1805.755159][ C1] NMI backtrace for cpu 1 [ 1805.755165][ C1] CPU: 1 PID: 10718 Comm: kworker/u4:9 Not tainted 5.7.0-rc4-syzkaller #0 [ 1805.755170][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1805.755173][ C1] Workqueue: krdsd rds_connect_worker [ 1805.755179][ C1] RIP: 0010:__lock_acquire+0x250d/0x4c50 [ 1805.755190][ C1] Code: ff 41 be 01 00 00 00 e9 18 e6 ff ff 48 8d 7d d8 e8 18 2d ff ff 48 ba 00 00 00 00 00 fc ff df 48 8d 78 40 48 89 f9 48 c1 e9 03 <80> 3c 11 00 0f 85 2e 1d 00 00 48 83 78 40 00 0f 85 4b e7 ff ff 0f [ 1805.755193][ C1] RSP: 0018:ffffc90016a6f780 EFLAGS: 00000806 [ 1805.755200][ C1] RAX: ffffffff8c3170b0 RBX: 00000000661ad43e RCX: 1ffffffff1862e1e [ 1805.755205][ C1] RDX: dffffc0000000000 RSI: 0000000000000008 RDI: ffffffff8c3170f0 [ 1805.755209][ C1] RBP: ffff888047f1cf68 R08: 0000000000000001 R09: fffffbfff185cf4d [ 1805.755214][ C1] R10: ffffffff8c2e7a67 R11: fffffbfff185cf4c R12: ffff888047f1c600 [ 1805.755218][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffffffff8a898210 [ 1805.755223][ C1] FS: 0000000000000000(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1805.755228][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1805.755232][ C1] CR2: 00007fe2c268fdb8 CR3: 0000000051388000 CR4: 00000000001426e0 [ 1805.755237][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1805.755241][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1805.755244][ C1] Call Trace: [ 1805.755247][ C1] ? mark_held_locks+0xe0/0xe0 [ 1805.755250][ C1] ? mark_lock+0x12b/0xf10 [ 1805.755253][ C1] ? mark_held_locks+0xe0/0xe0 [ 1805.755256][ C1] ? mark_lock+0x12b/0xf10 [ 1805.755259][ C1] lock_acquire+0x1f2/0x8f0 [ 1805.755262][ C1] ? inet_csk_get_port+0xc3c/0x2590 [ 1805.755265][ C1] ? lock_release+0x800/0x800 [ 1805.755268][ C1] ? mark_held_locks+0x9f/0xe0 [ 1805.755272][ C1] ? inet_get_local_port_range+0xfa/0x3d0 [ 1805.755275][ C1] ? lockdep_hardirqs_on+0x463/0x620 [ 1805.755279][ C1] ? inet_get_local_port_range+0x24f/0x3d0 [ 1805.755282][ C1] _raw_spin_lock_bh+0x2f/0x40 [ 1805.755285][ C1] ? inet_csk_get_port+0xc3c/0x2590 [ 1805.755288][ C1] inet_csk_get_port+0xc3c/0x2590 [ 1805.755292][ C1] ? inet_csk_listen_stop+0xb20/0xb20 [ 1805.755295][ C1] ? mark_held_locks+0x9f/0xe0 [ 1805.755298][ C1] ? __local_bh_enable_ip+0x159/0x270 [ 1805.755301][ C1] __inet_bind+0x5b2/0xbd0 [ 1805.755304][ C1] inet_bind+0xf3/0x160 [ 1805.755308][ C1] rds_tcp_conn_path_connect+0x536/0x880 [ 1805.755311][ C1] ? rds_tcp_state_change+0x270/0x270 [ 1805.755314][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 1805.755317][ C1] rds_connect_worker+0x1a5/0x2c0 [ 1805.755321][ C1] process_one_work+0x965/0x16a0 [ 1805.755323][ C1] ? lock_release+0x800/0x800 [ 1805.755327][ C1] ? pwq_dec_nr_in_flight+0x310/0x310 [ 1805.755330][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 1805.755333][ C1] worker_thread+0x96/0xe20 [ 1805.755336][ C1] ? process_one_work+0x16a0/0x16a0 [ 1805.755339][ C1] kthread+0x388/0x470 [ 1805.755342][ C1] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1805.755345][ C1] ret_from_fork+0x24/0x30 [ 1806.084713][ T1133] Kernel panic - not syncing: hung_task: blocked tasks [ 1806.091600][ T1133] CPU: 0 PID: 1133 Comm: khungtaskd Not tainted 5.7.0-rc4-syzkaller #0 [ 1806.099838][ T1133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.109904][ T1133] Call Trace: [ 1806.113230][ T1133] dump_stack+0x188/0x20d [ 1806.117604][ T1133] panic+0x2e3/0x75c [ 1806.121536][ T1133] ? add_taint.cold+0x16/0x16 [ 1806.126226][ T1133] ? lapic_can_unplug_cpu.cold+0x3b/0x3b [ 1806.131883][ T1133] ? preempt_schedule_thunk+0x16/0x18 [ 1806.139810][ T1133] ? watchdog+0xa8c/0x1010 [ 1806.144240][ T1133] ? nmi_trigger_cpumask_backtrace+0x214/0x27e [ 1806.150409][ T1133] watchdog+0xa9d/0x1010 [ 1806.154668][ T1133] ? reset_hung_task_detector+0x30/0x30 [ 1806.160228][ T1133] kthread+0x388/0x470 [ 1806.164344][ T1133] ? kthread_mod_delayed_work+0x1a0/0x1a0 [ 1806.170073][ T1133] ret_from_fork+0x24/0x30 [ 1806.176219][ T1133] Kernel Offset: disabled [ 1806.180554][ T1133] Rebooting in 86400 seconds..